Rostislav Panev, a 51-year-old dual Russian-Israeli national, has been extradited to the United States following his arrest in Israel last August. Panev is accused of being a key developer for the notorious LockBit ransomware operation since its inception in 2019.

## Evidence and Allegations

Israeli authorities discovered damning evidence on Panev’s laptop, including credentials for LockBit’s internal control panel and source code repositories for the group’s ransomware encryptors and data theft tool, StealBit. According to the U.S. Department of Justice, Panev earned approximately $230,000 in cryptocurrency between June 2022 and February 2024 for his development work with the criminal organization.

## LockBit’s Global Impact

Under Panev’s technical guidance, LockBit grew into “the most active and destructive ransomware group in the world,” targeting over 2,500 entities across 120 countries and extorting more than $500 million in ransom payments. Approximately 72% of victims were U.S.-based organizations, including critical infrastructure such as hospitals, schools, corporations, and government agencies.

## Ongoing Crackdown

Panev remained active with LockBit until February 2024, when an international law enforcement operation led by the UK’s National Crime Agency and the FBI severely disrupted the organization. His extradition follows indictments against other LockBit members, including:

– Dmitry Yuryevich Khoroshev (leader, known as “LockBitSupp”) – currently wanted with a $10M reward
– Mikhail Vasiliev – awaiting sentencing
– Ruslan Astamirov – awaiting sentencing
– Artur Sungatov – wanted
– Ivan Kondratyev – wanted
– Mikhail Matveev – wanted with a $10M bounty

The U.S. Department of State’s Transnational Organized Crime Rewards Program offers up to $10 million for information leading to the identification of LockBit core team members and $5 million for tips on affiliates.