lockbit

ChainCatcher news, according to Bitcoin.com, Lockbit ransomware developer Rostislav Panev has been extradited to the United States and is currently detained awaiting trial. According to charges from the U.S. Department of Justice, he has been a programmer for the software since 2022 and has received approximately $230,000 in cryptocurrency transfers. With servers being seized and associates pleading guilty, Lockbit may face further blows, but key figures such as the organization's leader Dmitry Khoroshev remain at large.It is reported that Russian citizen Ruslan Magomedovich Astamirov and dual Canadian and Russian national Mikhail Vasiliev have also been identified as members of the Lockbit organization. They were arrested in 2023 and 2022, respectively, and could face up to 25 years and 45 years in prison.

ChainCatcher news, according to Chainalysis, the U.S. Department of the Treasury's Office of Foreign Assets Control (OFAC), the UK Foreign, Commonwealth & Development Office (FCDO), and the Australian Department of Foreign Affairs and Trade (DFAT) jointly announced sanctions against the Russian bulletproof hosting provider Zservers on February 11, 2025. The company was sanctioned for supporting the attack activities of the LockBit ransomware group.The sanctions list includes two Russian citizens, Aleksandr Bolshakov and Alexander Mishin, along with their associated cryptocurrency addresses, as well as Zservers and its three cryptocurrency addresses.On-chain data shows that Zservers has completed over $5.2 million in fund settlements through KYC-free exchanges like Garantex. The company has servers in Russia, Bulgaria, the Netherlands, the United States, and Finland, providing infrastructure support for multiple ransomware organizations.

ChainCatcher news, according to News.bitcoin, the U.S. Department of Justice (DOJ) revealed that two foreign nationals have pleaded guilty in Newark federal court for their involvement in the Lockbit ransomware organization. Russian citizen Ruslan Magomedovich Astamirov and dual Canadian-Russian national Mikhail Vasiliev have been identified as members of the Lockbit organization.The group has been active since January 2020, targeting over 2,500 victims across 120 countries and extorting approximately $500 million in ransom. Their victims include hospitals, educational institutions, and commercial enterprises. Astamirov and Vasiliev used Lockbit ransomware to encrypt and steal data, demanding ransom and threatening to publish information if their demands were not met. They were arrested in 2023 and 2022, respectively, and could face up to 25 years and 45 years in prison.

ChainCatcher news, according to Scopescan monitoring, Tether has banned the ransomware LockBit associated address 0xf370. It is reported that this address is a CoinsPaid deposit address, and currently does not hold USDT tokens.

ChainCatcher news, according to CoinDesk, the U.S. Office of Foreign Assets Control (OFAC) named two Russians, Artur Sungatov and Ivan Kondratyev, who were indicted for deploying ransomware in a statement, and identified 10 Bitcoin and Ethereum addresses that have been added to the U.S. Specially Designated Nationals (SDN) list, prohibiting U.S. entities from providing any form of financial services to these two individuals. OFAC stated that the two are members of the LockBit ransomware group, which is one of the world's most prolific ransomware distributors, accused of stealing over $120 million from more than 2,000 victims over the past few years.Earlier this week, the U.S. Department of Justice, Europol, the UK's National Crime Agency, and agencies from several other countries seized LockBit's website and various web pages in an international operation. Law enforcement announced that they would distribute decryption keys to victims, enabling them to regain access to their devices.

ChainCatcher news, the UK's National Crime Agency (NCA) announced today that it has dismantled the world's largest cybercrime organization, LockBit. After infiltrating the organization's network, the NCA has taken control of several of LockBit's services, thereby undermining their entire criminal enterprise.It is reported that the Lockbit ransomware gang has been exceptionally active since September 2019. LockBit itself is malware capable of automatically scanning for valuable targets, spreading infections, and encrypting all accessible computer systems on the network. LockBit demands ransom payments by blocking victims' access to their computer systems. LockBit typically only accepts payments in cryptocurrencies such as Bitcoin, Monero, or Zcash.