Transnational Organized Crime Rewards Program Offer and Designation of a Senior Leader of Russia-Based Ransomware Group LockBit

The Department of State is announcing a reward offer under the Transnational Organized Crime Rewards Program (TOCRP) of up to $10 million for information leading to the arrest and/or conviction of Russian national Dmitry Yuryevich Khoroshev for participating in, conspiring to participate in or attempting to participate in transnational organized cybercrime as a leader of the LockBit ransomware group.  This announcement follows the criminal indictment returned by a federal grand jury in the District of New Jersey and recently unsealed charging Khoroshev with crimes arising from his role in developing the LockBit ransomware variant and conspiring to conduct multiple ransomware attacks targeting victims in the United States and around the world.

Concurrently, the Department of the Treasury is designating Khoroshev for his lead role in developing and distributing LockBit ransomware.  These actions are part of a whole-of-government effort as well as collaboration with our international partners.  Australia and the United Kingdom are also designating Khoroshev under their respective cyber sanctions authorities.

Today’s actions underscore the United States’ commitment, along with our international partners, to identify the cybercriminals behind the LockBit ransomware variant and bring them to justice.  We will continue to stand with our partners to disrupt ransomware actors that threaten our economies and critical infrastructure.

Any information in response to the reward offer for Khoroshev may be directed to the FBI by email at [email protected], via Telegram at @LockbitRewards, or via Signal at @FBISupp.01.  The Department of the Treasury actions today were taken pursuant to Executive Order (E.O.) 13694, as amended by E.O. 13757.  For more information on today’s action, see Treasury’s press release.