Executive
The man they put on LockBitSupp
On 7 May 2024 the United States, United Kingdom, and Australia named a 31-year-old Russian from Voronezh — Dmitry Yuryevich Khoroshev — as the person behind LockBitSupp, the loud public admin of LockBit, then the world’s most deployed ransomware-as-a-service.
DOJ says he built it from September 2019, took a 20% admin cut, and personally cleared at least $100 million while the group hit more than 2,000 victims and banked $120 million-plus in paid ransoms. Twenty-six federal counts. Statutory max 185 years. A $10 million State Department bounty. He is not in custody. Russia does not extradite its nationals.
Three months earlier, Operation Cronos had already seized the leak sites, dumped ~194 affiliate handles, handed victims a LockBit 3.0 decryptor, and arrested people in Poland, Ukraine, and the U.S. The brand limped on (4.0, then reported 5.0). In March 2025 a dual Russian-Israeli developer, Rostislav Panev, was extradited to New Jersey. In May 2025 someone in “Prague” dumped the rebuilt admin panel. The original admin is still the hole in the net.