Three years of reporting, funded by our readers — become a member now and help us prepare for 2025.
Goal: 1,000 new members for our birthday. Gift a membership to your friend and help us prepare for what 2025 might bring.
Become a member Gift membership
Skip to content
Dmitry Khoroshev, a Russian national, has been identified as one of the leaders of the ransomware group Lockbit. (National Crime Agency) 
This audio is created with AI assistance

The U.K., U.S., and Australia announced sanctions on the Russian leader of the cyber-crime gang, LockBit, the U.K.'s National Crime Agency (NCA) announced on May 7.

Lockbit has become one of the most prolific ransomware groups in recent years, carrying out 3,000 cyberattacks in the U.S. and Europe and resulting in losses of billions of euros. The sanctions will target Dmitry Khoroshev, a Russian national who has been identified as one of the senior leaders of Lockbit.

The NCA announced in February that it had taken control of Lockbit's services, allowing it to infiltrate the group's network. Ukraine's National Police arrested two men in Ternopil Oblast suspected of involvement with Lockbit. The agency previously described Lockbit as the "world's most harmful cybercrime group," having targeted "thousands" of victims in ransomware attacks.

Lockbit was reportedly responsible for 25% of ransomware attacks globally last year, targeting thousands of victims, including over 200 Ukrainian businesses. The group conducted a mass online campaign, illegally stealing and using sensitive data to steal billions of dollars from businesses and individuals.

According to the director of the U.K.'s National Crime Agency, General Graeme Biggar, Dmitry Khoroshev offered $10 million to anyone who could reveal his identity.

"Dmitry Khoroshev thought he was beyond reproach, even offering $10 million to anyone who could reveal his identity, but these actions dispel that myth," Biggar said. "Our investigation into LockBit and its affiliates continues and, working with our international partners, we’ll do everything we can to undermine their operations and protect the public."

The announcement comes only hours after the U.K. Defense Ministry was struck by a cyberattack, likely carried out by Chinese hackers.

Chinese and Russian-linked hacking groups have been accused of launching cyberattacks on a number of European governments and institutions, such as the U.K.'s Sellafield nuclear waste site.

Police arrest 2 suspected affiliates of international cyber crime group Lockbit
Two men suspected of involvement in the international cybercriminal group Lockbit were arrested in Ternopil Oblast, Ukraine’s National Police reported on Feb. 21.
Three years of reporting, funded by our readers.
Millions read the Kyiv Independent, but only one in 10,000 readers makes a financial contribution. Thanks to our community we've been able to keep our reporting free and accessible to everyone. For our third birthday, we're looking for 1,000 new members to help fund our mission and to help us prepare for what 2025 might bring.
Three years. Millions of readers. All thanks to 12,000 supporters.
It’s thanks to readers like you that we can celebrate another birthday this November. We’re looking for another 1,000 members to help fund our mission, keep our journalism accessible for all, and prepare for whatever 2025 might bring. Consider gifting a membership today or help us spread the word.
Help us get 1,000 new members!
Become a member Gift membership
visa masterCard americanExpress

News Feed

MORE NEWS

Editors' Picks

Enter your email to subscribe
Please, enter correct email address
Subscribe
* indicates required
* indicates required
Subscribe
* indicates required
* indicates required
Subscribe
* indicates required
Subscribe
* indicates required
Subscribe
* indicates required

Subscribe

* indicates required
Subscribe
* indicates required
Subscribe
* indicates required
Explaining Ukraine with Kate Tsurkan
* indicates required
Successfuly subscribed
Thank you for signing up for this newsletter. We’ve sent you a confirmation email.