Rostislav Panev, a 51-year-old dual Russian-Israeli national, has been extradited to the United States after being arrested in Israel in August 2024. Panev allegedly served as a developer for the notorious LockBit ransomware group from 2019 until February 2024, when law enforcement seized the operation’s infrastructure.
“Rostislav Panev’s extradition to the District of New Jersey makes it clear: if you are a member of the LockBit ransomware conspiracy, the United States will find you and bring you to justice,” stated US Attorney John Giordano.
## LockBit’s Devastating Impact
LockBit emerged as one of the most destructive ransomware operations globally, targeting over 2,500 entities across 120 countries, with nearly 1,800 victims in the United States alone. Their targets ranged from individuals and small businesses to multinational corporations, including:
– Hospitals
– Schools
– Nonprofit organizations
– Critical infrastructure
– Government agencies
– Law enforcement departments
The criminal enterprise amassed approximately $500 million in illicit profits while causing billions in damages through lost revenue and recovery costs.
## Panev’s Technical Role
As a LockBit developer, Panev was responsible for designing and maintaining the ransomware’s codebase, earning around $230,000 between June 2022 and February 2024. According to the Justice Department, Panev admitted to:
– Developing code to disable antivirus software
– Creating deployment mechanisms to spread malware across victim networks
– Programming functionality to print ransom notes to all connected printers
– Maintaining the LockBit malware code
– Providing technical guidance to the group
## Broader Crackdown
Panev is one of seven LockBit members charged in the US, alongside:
– Mikhail Vasiliev
– Ruslan Astamirov
– Artur Sungatov
– Ivan Gennadievich Kondratiev
– Mikhail Pavlovich Matveev
– Dmitry Yuryevich Khoroshev (identified as LockBitSupp, the group’s administrator)
Additionally, the Treasury Department’s Office of Foreign Assets Control has sanctioned Khoroshev, Matveev, Sungatov, and Kondratyev for their involvement in these cyberattacks.