US authorities promise $10 million for information on LockBit organizer Dmitry Khoroshev

The U.S. Department of Justice has indicted 31-year-old Russian citizen Dmitry Yuryevich Khoroshev, also known as LockBitSupp and putinkrab, and announced a $10 million dollar reward for any information that will help apprehend him.

In a statement, the DOJ says that Dmitry Khoroshev allegedly acted as the developer and administrator of the LockBit ransomware group and turned it into one of the “most pervasive and destructive ransomware groups in the world.”

Khoroshev has allegedly been involved in LockBit (fraudulent software) since its appearance in September 2019. Over the years, LockBit has victimized more than 2,500 people in 120 countries, Khoroshev and other co-conspirators have allegedly collected at least $500 million in ransom payments.

LockBit operates on a ransomware-as-a-service model, allowing attackers to buy or rent software to use against victims. High-profile attacks on the UK Royal Mail, children’s hospital, and the small Canadian town of St. Marys, Ontario have been linked to the program.

In 2023, LockBit attacked Boeing and Allen & Overy. The ransomware encrypts the victim’s data and threatens to make it public if they refuse to pay the ransom. On their darknet site, the hackers note that the group is “based in the Netherlands, completely apolitical and only interested in money.”

In February, US and UK law enforcement agencies seized websites and servers used by LockBit and even obtained keys with which the organizations could regain access to their data. At the same time, charges were filed against Artur Sungatov and Ivan Kondratyev for using LockBit against victims in the US.

According to preliminary information, Khoroshev had 20% of each ransom received from victims and also managed the group’s website. Law enforcement authorities found that Khoroshev kept the victims’ stolen data even after the group “falsely promised” to delete the information when payment was received.

“Today’s indictment marks a major milestone in the investigation and prosecution of LockBit, which has already led to the indictment of five other LockBit affiliates – two of whom are in custody awaiting trial,” U.S. Attorney for the District of New Jersey, Philip R. Sellinger.

Khoroshev is charged with 26 counts of fraud, extortion, and damaging protected computers.

The hacker faces up to 185 years in prison. In addition to punishing Khoroshev, the feds are offering a $10 million dollar reward for information that will help law enforcement apprehend him.