A key developer of the notorious LockBit ransomware gang has been arrested in Israel, marking another blow to one of the world's most destructive cybercriminal operations.
Rostislav Panev, a 51-year-old dual Russian-Israeli citizen, was apprehended last August and faces extradition to the United States on multiple charges related to his alleged role in developing malware for the criminal enterprise since 2019.
According to the US Department of Justice, Panev received approximately $230,000 in cryptocurrency payments for his work with LockBit between June 2022 and February 2024. At the time of his arrest, authorities discovered administrator credentials for LockBit's dark web repository and control panel on his laptop.
During interviews with Israeli authorities, Panev admitted to performing coding development and consulting work for LockBit, including creating malware to disable antivirus software and deploy ransomware across victim networks.
The LockBit operation has been responsible for over 2,500 cyberattacks across 120 countries, with 1,800 victims in the US alone. Their targets included businesses, hospitals, schools, government agencies, and critical infrastructure. The group is estimated to have collected at least $500 million in ransom payments while causing billions in damages.
"Three of the individuals who we allege are responsible for LockBit's cyberattacks against thousands of victims are now in custody," said US Attorney General Merrick B. Garland. The arrest follows a major international law enforcement operation in February that disrupted LockBit's infrastructure.
Despite these setbacks, individuals claiming to represent LockBit have announced plans to release a new version of their ransomware in early 2025, suggesting the criminal enterprise may attempt to rebuild its operations.
The case highlights ongoing efforts by international law enforcement to dismantle ransomware groups and bring their members to justice, regardless of where they operate.