According to the investigative services in those countries, Khoroshev hides behind the alias LockBitSupp. The US Department of Justice describes Khoroshev as the “founder, developer and administrator” of LockBit. Khoroshev is now on the sanctions list of the US, UK and Australia and has been charged in the US with charges including fraud and extortion.
At the beginning of this year, LockBit’s infrastructure was largely shut down during an international police operation. With Operation Cronos, police forces from a number of Western countries are said to have infiltrated ‘right into the core’ of LockBit.
This was a major blow to the largest global group of hackers involved in so-called ransomware, although the group is still active. According to the United Kingdom, LockBit attacks have decreased by more than 70 percent since February.
By infecting computers, hackers such as LockBit can block IT systems. The victim then receives a message that a ransom must be paid, usually in bitcoin. If this does not happen, the hackers threaten to disclose sensitive information from the hacked systems.
20 percent of the ransom
LockBit offers its services through smaller subgroups that pay to use the software, a practice called Ransomware as a Service (RaaS). According to the US Justice Department, LockBit will receive 20 percent of the ransom and the hacking subgroup 80 percent. The group has killed more than 2,500 victims worldwide, earning an estimated $500 million (464 million euros). Khoroshev himself is said to have already made 100 million dollars from it.
De Volkskrant managed to speak to LockBitSupp in 2021. He also said, anonymously, that anyone can become a victim of LockBit. Only companies and organizations from countries that were once part of the former Soviet Union are left alone; LockBitSupp only wanted to say about his identity that he came from one of those countries.
There was already a suspicion that he came from Russia, something that has now been confirmed. According to the US Treasury Department, which oversees sanctions against Khoroshev, the Russian is 31 years old. That agency has also revealed his email address and passport number, among other things.
10 million dollars
After Operation Cronos revealed its infiltration operation, investigators said they would also soon reveal LockBitSupp’s identity. That ultimately took several months. Now the big question is whether Khoroshev will ever be apprehended. A maximum of $10 million has been offered for information leading to his arrest.
That amount may be a nod to LockBitSupp. In February, he proudly said he would pay $10 million to anyone who revealed his identity.
Tags: Leader infamous hacker group LockBit unmasked countries offer millions arrest
