Rostislav Panev has been formally charged with participating in the operations of the LockBit ransomware group. According to investigators, Panev played a pivotal role as a primary developer of the group’s encryption malware, as well as the StealBit information stealer.
The 51-year-old Panev was apprehended in Israel in August 2024 and subsequently extradited to the United States. Upon his arrest, law enforcement officials discovered incriminating evidence on his laptop, including credentials to access LockBit’s internal administrative panel and source code for the malicious software used in cyberattacks. In December, the U.S. Department of Justice officially charged Panev with the creation of malicious tools instrumental in executing successful cyberattacks.
Investigators determined that between June 2022 and February 2024—a span of 18 months—Panev received cryptocurrency payments totaling at least $230,000 for his involvement in the group’s activities. However, evidence of Panev’s affiliation with LockBit dates back to the group’s inception in 2019.
February 2024 marked a critical turning point for LockBit, as the joint international law enforcement operation dubbed “Kronos,” led by British and American intelligence agencies, significantly disrupted the group’s activities. Following multiple arrests and targeted cyber operations, LockBit’s infrastructure was severely damaged.
In addition to Panev, U.S. authorities continue to pursue other LockBit affiliates. The group’s leader, Dmitry Yurievich Khoroshev (LockBitSupp), has been declared a wanted fugitive, with a $10 million reward offered for information leading to his capture. Among others sought and charged are Mikhail Vasiliev, Ruslan Astamirov, Artur Sungatov, Ivan Kondratyev, and Mikhail Matveev. Matveev, in particular, is suspected of involvement not only with LockBit but also with propagating other ransomware variants, prompting authorities to announce an identical $10 million reward for his apprehension.
The U.S. Department of Justice remains committed to apprehending key members of LockBit, offering rewards of $10 million for information aiding the identification and capture of the group’s masterminds, and $5 million for details on active participants.
