U.S. announces $10 million bounty for alleged LockBit ransomware creator

Dimitry Yuryevich Khoroshev, 31, is charged with 26 counts related to fraud, extortion and damage to protected computers.

The U.S. Department of Justice has indicted Russian national Dimitry Yuryevich Khoroshev, 31, and announced a $10 million reward for any information leading to his apprehension.

Khoroshev is charged with 26 counts related to fraud, extortion and damage to protected computers, and the U.S. DOJ claimed that he allegedly served as the LockBit ransomware group’s developer and administrator from around September 2019 through May 2024.

“Khoroshev and his affiliate co-conspirators, grew LockBit into what was, at times, the most active and destructive ransomware variant in the world. The LockBit ransomware group attacked more than 2,500 victims in at least 120 countries, including 1,800 victims in the United States,” the U.S. DOJ noted, adding that at least $500 million was extracted in ransom payments from victims.

Ransomware attacks generally see hackers targeting users’ personal information/data and threatening to release this or sell it to malicious actors unless they pay a fee in exchange for having the stolen data deleted.

(For top technology news of the day, subscribe to our tech newsletter Today’s Cache)

However, the U.S. DOJ claimed that Khoroshev kept copies of data stolen from LockBit victims who had already paid the demanded ransom. This means they could be targeted again in the future.

He also allegedly received at least $100 million in digital currency through developer shares of LockBit ransom payments, said the DOJ.