How Did Authorities Identify the Alleged Lockbit Boss?

Last week, the United States joined the U.K. and Australia in sanctioning and charging a Russian man named Dmitry Yuryevich Khoroshev as the leader of the infamous LockBit ransomware group. LockBit's leader "LockBitSupp" claims the feds named the wrong guy, saying the charges don't explain how they connected him to Khoroshev. This post examines the activities of Khoroshev's many alter egos on the cybercrime forums, and tracks the career of a gifted malware author who has written and sold malicious …

a little sunshine australia boss breadcrumbs cerber charges charging claims connected constella intelligence dmitry yuryevich khoroshev don exploit identify intel 471 joined leader lockbit lockbit ransomware lockbit ransomware group lockbitsupp ne'er-do-well news ransomware ransomware as a service ransomware group russian states united united states us department of the treasury verified week wrong