News Feed

UK and allies sanction leader of Russian ransomware group

2 min read
UK and allies sanction leader of Russian ransomware group
Dmitry Khoroshev, a Russian national, has been identified as one of the leaders of the ransomware group Lockbit. (National Crime Agency) 

The U.K., U.S., and Australia announced sanctions on the Russian leader of the cyber-crime gang, LockBit, the U.K.'s National Crime Agency (NCA) announced on May 7.

Lockbit has become one of the most prolific ransomware groups in recent years, carrying out 3,000 cyberattacks in the U.S. and Europe and resulting in losses of billions of euros. The sanctions will target Dmitry Khoroshev, a Russian national who has been identified as one of the senior leaders of Lockbit.

The NCA announced in February that it had taken control of Lockbit's services, allowing it to infiltrate the group's network. Ukraine's National Police arrested two men in Ternopil Oblast suspected of involvement with Lockbit. The agency previously described Lockbit as the "world's most harmful cybercrime group," having targeted "thousands" of victims in ransomware attacks.

Lockbit was reportedly responsible for 25% of ransomware attacks globally last year, targeting thousands of victims, including over 200 Ukrainian businesses. The group conducted a mass online campaign, illegally stealing and using sensitive data to steal billions of dollars from businesses and individuals.

According to the director of the U.K.'s National Crime Agency, General Graeme Biggar, Dmitry Khoroshev offered $10 million to anyone who could reveal his identity.

"Dmitry Khoroshev thought he was beyond reproach, even offering $10 million to anyone who could reveal his identity, but these actions dispel that myth," Biggar said. "Our investigation into LockBit and its affiliates continues and, working with our international partners, we’ll do everything we can to undermine their operations and protect the public."

The announcement comes only hours after the U.K. Defense Ministry was struck by a cyberattack, likely carried out by Chinese hackers.

Chinese and Russian-linked hacking groups have been accused of launching cyberattacks on a number of European governments and institutions, such as the U.K.'s Sellafield nuclear waste site.

Avatar
Rachel Amran

News Editor

Rachel Amran is a news editor at the Kyiv Independent. She previously worked on the Europe and Central Asia team of Human Rights Watch investigating war crimes in Ukraine. Rachel holds a master's degree in Russian, Eastern European, and Eurasian Regional Studies from Columbia University.

Read more
News Feed
 (Updated:  )

The latest estimates appear to be significantly higher than figures published earlier this month by independent Russian media outlets Mediazona and Meduza that estimated 352,000 Russian men between the ages of 18 and 59 have been killed since the start of the full-scale invasion in February 2022.

Video

The Kyiv Independent’s Martin Fornusek speaks with Kaupo Rosin, director general of Estonia’s Foreign Intelligence Service, about Russia’s long-term strategy against Ukraine and Europe, the risks facing NATO’s eastern flank, and why Moscow still views the United States as its main adversary.

Show More