LockBit Ransomware Developer Extradited to U.S. Amid Global Crackdown
A 51-year-old dual Russian-Israeli national, Rostislav Panev, has been extradited to the United States, nearly three months after being formally charged for his alleged role in the LockBit ransomware operation.
A 51-year-old dual Russian-Israeli national, Rostislav Panev, has been extradited to the United States, nearly three months after being formally charged for his alleged role in the LockBit ransomware operation. Panev, who was arrested in Israel in August 2024, is accused of working as a developer for the notorious cybercrime group from 2019 until February 2024, when law enforcement seized LockBit's online infrastructure.
A Major Blow to LockBit
LockBit emerged as one of the most destructive ransomware groups, attacking over 2,500 organizations across 120 countries, including nearly 1,800 victims in the U.S.. The group targeted businesses, hospitals, schools, nonprofits, critical infrastructure, and government agencies, netting over $500 million in ransom payments, while causing billions in losses due to operational disruptions and recovery efforts.
Panev’s Role in LockBit’s Operations
As a developer, Panev played a crucial role in LockBit’s cyberattacks, earning around $230,000 between June 2022 and February 2024. His responsibilities included:
- Creating code to disable antivirus software
- Developing malware to spread across victim networks
- Programming ransom notes to print across all connected devices
- Maintaining LockBit’s malware code and providing technical support to the gang
U.S. Pledges Justice for Ransomware Operators
Panev's extradition underscores the United States' commitment to dismantling LockBit. "If you are a member of the LockBit ransomware conspiracy, the United States will find you and bring you to justice," said U.S. Attorney John Giordano.
Panev is one of seven LockBit members charged in the U.S., alongside:
- Mikhail Vasiliev
- Ruslan Astamirov
- Artur Sungatov
- Ivan Gennadievich Kondratiev
- Mikhail Pavlovich Matveev
- Dmitry Yuryevich Khoroshev (identified as LockBit’s administrator, aka LockBitSupp)
Additionally, Khoroshev, Matveev, Sungatov, and Kondratiev have been sanctioned by the U.S. Treasury Department for orchestrating ransomware attacks.
Global Crackdown on Ransomware Gangs
Panev’s extradition marks a significant step in international efforts to combat cybercrime, as law enforcement agencies continue to track and dismantle ransomware syndicates worldwide.
