Summary: Rostislav Panev, a dual citizen of Russia and Israel, has been charged in the US for his involvement with the LockBit ransomware group, which has extorted over $500 million from thousands of victims globally. He was arrested in Israel and is currently awaiting extradition to face charges related to his role in developing and maintaining the ransomware’s infrastructure.
Threat Actor: Rostislav Panev | Rostislav Panev
Key Point :
- Panev was involved with LockBit from its inception in 2019 until February 2024.
- The group targeted over 2,500 victims across 120 countries, causing billions in damages.
- He designed malware and maintained infrastructure, enabling affiliates to customize attacks.
- Evidence from his computer showed access to LockBit’s Dark Web tools and repositories.
- Panev reportedly received over $230,000 in cryptocurrency for his contributions.
The US has charged Rostislav Panev, a dual Russian and Israeli citizen, for his role as a developer for the LockBit ransomware group. Panev was apprehended in Israel in August and awaits extradition to the US.
According to authorities, Panev worked with LockBit from its inception in 2019 until February 2024. LockBit targeted over 2,500 victims across 120 countries, extorting more than $500 million and causing billions in damages.
Panev allegedly designed LockBit’s malware and maintained its infrastructure, allowing affiliates to customize ransomware for specific attacks. Evidence from Panev’s computer revealed access to LockBit’s Dark Web repositories, control panels, and tools like ‘StealBit,’ used to siphon stolen data.
Court documents further indicate Panev received over $230,000 in cryptocurrency for his work, including creating malware to disable antivirus software and distribute ransom notes across networks. Panev admitted to Israeli authorities that he developed and maintained LockBit’s malware and provided technical guidance to the group.
Original Source: https://www.justice.gov/opa/pr/united-states-charges-dual-russian-and-israeli-national-developer-lockbit-ransomware-group
Cyber Law and Cybercrime Investigation Blog: Immuniweb