Russian authorities have apprehended Mikhail Pavlovich Matveev, a prominent ransomware operator who operated under various aliases including Wazawaka, m1x, and Boriselcin. The case is currently being processed by the Kaliningrad Central District Court.

Matveev’s criminal enterprise involved developing sophisticated ransomware specifically designed to target commercial organizations. He played key roles in major ransomware groups including Hive, LockBit, and Babuk, while also managing the Ramp hacking forum.

His most significant attacks included:
– LockBit’s assault on New Jersey law enforcement (June 2020)
– Babuk’s breach of DC Metropolitan Police (April 2021)
– Hive’s attack on a New Jersey healthcare facility (May 2022)

The U.S. government responded aggressively to Matveev’s activities, with the Department of Justice filing charges and the Treasury Department implementing sanctions. The State Department offered a substantial $10 million reward for information leading to his capture, particularly due to his targeting of U.S. law enforcement and critical infrastructure.

Notably, Matveev maintained a bold social media presence through his Twitter account (@RansomBoris), openly discussing his operations and mocking U.S. authorities after sanctions were imposed.

This arrest marks a significant shift in Russia’s approach to cybercrime enforcement, as the country has traditionally been reluctant to take action against cybercriminals targeting Western institutions.