Russian National Indicted for Leading LockBit Ransomware Group Responsible for $500 Million in Theft
ICARO Media Group
Khoroshev is accused of being the mastermind behind the notorious LockBit ransomware-as-a-service group, which targeted over 2,000 victims and stole more than $500 million in ransomware payments.
The LockBit group, under Khoroshev's leadership, was described by the Department of Justice as "the most prolific ransomware group in the world." Their victims ranged from individuals and small businesses to multinational corporations, hospitals, schools, nonprofit organizations, critical infrastructure, and even government and law enforcement agencies.
The charges against Khoroshev were outlined in a 26-count indictment filed in U.S. District Court in New Jersey. It is alleged that Khoroshev personally profited from the illicit activities of LockBit, pocketing at least $100 million from victims. He would typically receive 20% of each ransom payment made by the victims.
To aid in Khoroshev's capture, the U.S. State Department has posted a reward of $10 million for any information leading to his arrest. Furthermore, the Treasury Department has imposed sanctions on Khoroshev, freezing any assets he may have in the United States or under the control of Americans.
This announcement comes three months after a joint operation involving law enforcement agencies in the U.K., the DOJ, FBI, and international partners successfully seized public websites used by LockBit and gained control over the group's administrative servers. These seizures revealed that Khoroshev had retained copies of stolen data from victims who had paid the ransom.
Khoroshev, also known by his aliases LockBitSupp, LockBit, and putinkrab, now faces a lengthy list of charges, including conspiracy to commit fraud, wire fraud, intentional damage to protected computers, and extortion related to confidential information and computer damage. If convicted, he could face a maximum sentence of 185 years in prison.
FBI Director Christopher Wray highlighted the magnitude of the LockBit ransomware group's impact, stating, "The LockBit ransomware group represented one of the most prolific ransomware variants across the globe, causing billions of dollars in losses and wreaking havoc on critical infrastructure, including schools and hospitals."
This indictment serves as a powerful message to cybercriminals that law enforcement agencies are dedicated to tracking down and bringing the perpetrators of cyberattacks to justice. It also emphasizes the importance of bolstering cybersecurity measures to protect individuals, businesses, and critical infrastructure from the rapidly evolving threat of ransomware attacks.