A newly unsealed criminal complaint reveals a multi-year effort by U.S. law enforcement to dismantle the LockBit ransomware-as-a-service group.

The group's leader, Dmitry Khoroshev, remains at large, with a reward of up to $10 million offered for information leading to his capture.

The U.S. Department of Justice has charged Rostislav Panev, a 51-year-old dual Russian-Israeli national, for his alleged role in developing malware for the notorious LockBit ransomware group.

Court documents reveal that Panev admitted to significant involvement in programming for LockBit, including disabling antivirus software, deploying malware, and generating ransom notes, earning over $230,000 in cryptocurrency from mid-2022 to early 2024.

U.S. Attorney Philip R. Sellinger highlighted that Panev built and maintained tools for LockBit, contributing to billions in damages globally.

The charges against Panev include computer fraud, wire fraud, and extortion, underscoring the serious nature of his alleged crimes.

Panev's arrest is part of a broader international crackdown on LockBit, which has seen seven members charged in the U.S. since 2023.

LockBit has been linked to attacks on over 2,500 victims across at least 120 countries, targeting various sectors including small businesses, hospitals, and law enforcement agencies.

Despite significant disruptions to its infrastructure earlier in 2024, LockBit's operations briefly resumed, indicating the group's resilience.

LockBit was identified as the most active ransomware group by 2022 and has been labeled the 'most destructive ransomware group in the world,' with its operations causing widespread disruption.

Cybersecurity analysts suggest that government efforts have effectively reduced the frequency of LockBit attacks and raised awareness about the consequences of ransomware.

Panev has been under arrest since August 2024, and a gag order related to his extradition was lifted recently, allowing further details of his case to emerge.