The LockBit ransomware leader was named as Dmitry Yuryevich Khoroshev, a Russian national, on 7 May 2024, when the US, UK and Australia sanctioned him. The US also offered a reward of up to $10 million for information leading to his arrest and conviction. He is accused of running the group behind LockBit attacks.
Who is the LockBit ransomware group?
LockBit ransomware group, known as one of the most active cybercriminal organizations globally, has targeted more than 2,500 victims and, according to the US Department of Justice, is alleged to have received more than $500 million in ransom payments.
What did the international operation reveal?
In February, a joint operation by authorities in the United Kingdom, the United States, and Europol targeted the LockBit ransomware group. This operation revealed significant details about Dmitry Yuryevich Khoroshev, purportedly a principal administrator of LockBit, as well as other individuals associated with the group’s activities.
Lockbit 3.0 Technical Analysis
What did the US State Department announce about the LockBit leader?
The U.S. Department of State issued a formal statement under the Transnational Organized Crime Rewards Program (TOCRP), declaring that actions are sanctioned to detain Russian citizen Dmitry Yuryevich Khoroshev in any country. He is accused of engaging in, conspiring to engage in, or attempting to engage in LockBit ransomware operations. Furthermore, the statement includes an offer of a reward of up to $10 million for information leading to his arrest and conviction. A photograph of the alleged LockBit administrator was also disseminated in conjunction with this announcement.

