Security News > 2024 > May > LockBit ransomware admin identified, sanctioned in US, UK, Australia
The FBI, UK National Crime Agency, and Europol have unveiled sweeping indictments and sanctions against the admin of the LockBit ransomware operation, with the identity of the Russian threat actor revealed for the first time.
According to a new indictment by the US Department of Justice and a press release by the NCA, the LockBit ransomware operator known as 'LockBitSupp' has been confirmed to be a Russian national named Dmitry Yuryevich Khoroshev, who reportedly earned $100 million as part of the gang's activities.
"The sanctions against Russian national Dmitry Khoroshev, the administrator and developer of the LockBit ransomware group, are being announced today by the FCDO alongside the US Department of the Treasury's Office of Foreign Assets Control and the Australian Department of Foreign Affairs," announced the National Crime Agency.
In the past, similar sanctions caused some ransomware negotiators to no longer assist in ransom payments for sanctioned ransomware operations.
The UK says LockBit was responsible for extorting $1 billion from thousands of companies worldwide, with the DOJ saying that Khoroshev and his affiliates extorted over $500 million in ransom payments.
LockBit ransomware affiliate gets four years in jail, to pay $860k.
News URL
Related news
- US sanctions LockBit ransomware’s bulletproof hosting provider (source)
- UK, US, Oz blast holes in LockBit's bulletproof hosting provider Zservers (source)
- US charges operators of cryptomixers linked to ransomware gangs (source)
- UK floats ransomware payout ban for public sector (source)
- UK Considers Banning Ransomware Payments (source)
- Medusa ransomware group claims attack on UK's Gateshead Council (source)
- All your 8Base are belong to us: Ransomware crew busted in global sting (source)
- US indicts 8Base ransomware operators for Phobos encryption attacks (source)
- US lawmakers press Trump admin to oppose UK's order for Apple iCloud backdoor (source)
- US newspaper publisher uses linguistic gymnastics to avoid saying its outage was due to ransomware (source)