Security News

International Agencies Unmasked LockBit Ransomware Group Leader

The LockBit ransomware leader was named as Dmitry Khoroshev in May 2024. See the sanctions, the $10 million reward and what the sources say about LockBit.

Brandefense logo Updated 2 Min Read
lockbit threat actors report analysis

The LockBit ransomware leader was named as Dmitry Yuryevich Khoroshev, a Russian national, on 7 May 2024, when the US, UK and Australia sanctioned him. The US also offered a reward of up to $10 million for information leading to his arrest and conviction. He is accused of running the group behind LockBit attacks.

Who is the LockBit ransomware group?

LockBit ransomware group, known as one of the most active cybercriminal organizations globally, has targeted more than 2,500 victims and, according to the US Department of Justice, is alleged to have received more than $500 million in ransom payments.

What did the international operation reveal?

In February, a joint operation by authorities in the United Kingdom, the United States, and Europol targeted the LockBit ransomware group. This operation revealed significant details about Dmitry Yuryevich Khoroshev, purportedly a principal administrator of LockBit, as well as other individuals associated with the group’s activities.

Lockbit 3.0 Technical Analysis

What did the US State Department announce about the LockBit leader?

The U.S. Department of State issued a formal statement under the Transnational Organized Crime Rewards Program (TOCRP), declaring that actions are sanctioned to detain Russian citizen Dmitry Yuryevich Khoroshev in any country. He is accused of engaging in, conspiring to engage in, or attempting to engage in LockBit ransomware operations. Furthermore, the statement includes an offer of a reward of up to $10 million for information leading to his arrest and conviction. A photograph of the alleged LockBit administrator was also disseminated in conjunction with this announcement.

image 1 - International Agencies Unmasked LockBit Ransomware Group Leader
Photograph of Dmitry Yuryevich Khoroshev

Frequently Asked Questions.

Who is the LockBit ransomware leader?

The US Treasury names Russian national Dmitry Yuryevich Khoroshev as the primary operator of the LockBitSupp persona, and the UK National Crime Agency calls him a LockBit administrator and developer.

How much is the reward for the LockBit leader?

The US State Department offered a reward of up to $10 million for information leading to Khoroshev's arrest and/or conviction.

How many victims has LockBit had?

According to the US Department of Justice, as quoted by Treasury, LockBit targeted over 2,500 victims worldwide and is alleged to have received more than $500 million in ransom payments.

Which countries sanctioned the LockBit leader?

The United States, the United Kingdom and Australia announced sanctions against Khoroshev on 7 May 2024.

Sources

  1. 1 U.S. Treasury: U.S. Sanctions LockBit Leader Dmitry Khoroshev
  2. 2 UK National Crime Agency: LockBit leader unmasked and sanctioned