US indicts leader of LockBit ransomware and offers $10 million reward

Khoroshev has reportedly had involvement in LockBit since it emerged in September 2019. Over the years, LockBit ransomware attacks have claimed more than 2,500 victims in at least 120 countries, with Khoroshev and other co-conspirators reportedly collecting at least $500 million in ransom payments.

In February, US and UK authorities seized the websites and servers used by LockBit and even obtained keys they could use to help organizations regain access to their data. At the time, it also accused Artur Sungatov and Ivan Kondratyev of deploying LockBit against victims in the US.

Khoroshev allegedly received 20% of each ransom payment extorted from victims and also ran the group’s data leak website. Law enforcement authorities discovered that Khoroshev kept the victims’ stolen data even after the group “falsely promised” it would delete the information upon receiving payment.

“Today’s indictment marks a significant milestone in the investigation and prosecution of LockBit, which has already led to charges against five other LockBit affiliates – two of which are in custody awaiting trial – and a major disruption to the now discredited LockBit operation,” said the US attorney. Philip R. Sellinger of the District of New Jersey in a statement.

Khoroshev faces 26 charges – including one count of conspiracy to commit fraud and eight counts of extortion for damaging a protected computer – and up to 185 years in prison. In addition to sanctioning Khoroshev, the feds are offering a $10 million reward for information that helps authorities arrest him.