US offers $10 million bounty for Russian citizen behind LockBit ransomware

Dmitry Yuryevich Khoroshev, the accused leader of the LockBit ransomware gang (Photo: NCA).

According to the U.S. State Department’s press office, a federal grand jury in New Jersey has charged 31-year-old Khoroshev with developing LockBit and conspiring to carry out multiple ransomware attacks targeting victims in the U.S. and worldwide.

The U.S. State Department has announced a $10 million reward for information leading to the arrest and/or conviction of this individual for "engaging in, conspiring to engage in, or attempting to engage in transnational organized cybercrime as the leader of the LockBit ransomware hacking group."

U.S. Attorney General Merrick Garland has accused Khoroshev of developing and operating this malicious network to target over 2,000 victims and collect over $100 million in ransom, causing damages in the billions worldwide.

According to the U.S. Department of Justice, Khoroshev hails from Voronezh, a city in Russia located about 50km south of Moscow.

The U.S. government has also imposed sanctions on Khoroshev, prohibiting any transactions with him. Violating these sanctions, including paying ransom to hackers, may result in severe penalties and prosecution.

On May 7, Australia and the U.K. also issued sanctions against Khoroshev. A law enforcement alliance led by the U.K.'s National Crime Agency (NCA) announced that this Russian national, known as LockBitSupp, is the administrator and developer of LockBit.

"The U.S., in close coordination with partners in the U.K. and Australia, will continue to pursue those responsible for these disruptive and threatening activities," said Brian Nelson, U.S. Assistant Secretary of the Treasury for Terrorism and Financial Intelligence.

In March, LockBitSupp stated that the law enforcement actions of these countries do not affect the group's operations. "I cannot be threatened. What doesn't kill you makes you stronger," LockBitSupp told The Record news agency.