Arrested in July, a Ukrainian cybercriminal linked to the Lockbit hacking collective.
In a significant development, a Ukrainian member of the notorious Lockbit ransomware group was apprehended by French gendarmes in Ukraine in July 2023[1]. The arrest signifies international cooperation in combating ransomware groups, particularly those operating from or within Ukraine.
Although specific details about the individual's exact role within Lockbit are scarce, it is evident that he was part of this leading cybercrime operation. Lockbit is infamous for deploying ransomware to extort organisations globally, and members typically manage or deploy the ransomware infrastructure[1].
The hospital in Corbeil-Essonnes, Paris region, was one of the victims of the Lockbit group in 2022. The hospital's computer system was inaccessible for over two months as a result of the attack[2]. The hacker is suspected of participating in around ten cyberattacks, although the exact number is yet to be confirmed[3].
In this particular incident, the hackers demanded 10 million dollars (9.7 million euros) from the hospital[2]. If the ransom was not paid, sensitive patient information such as names, birth dates, autopsy requests, and other colonoscopy and delivery reports were published online[2].
It is important to note that the founder of Lockbit, Dimitri Khorochev, remains at large[4]. He is reportedly based in Russia[4]. General Hervé Pétry, commander of the National Cyber Unit, stated that the arrested individual ensured himself a comfortable income[3]. However, the exact amount of money earned from his activities is yet to be evaluated[3].
The worldwide sting operation called "Chronos" weakened the Lockbit group in February 2024[5]. During this operation, 200 cryptocurrency accounts linked to the organisation were frozen, and 34 servers in Europe, Australia, the United States, and Great Britain were taken offline[5]. A $10 million bounty is currently on Dimitri Khorochev's head by the U.S. State Department[6].
This arrest serves as a reminder of the ongoing efforts to combat ransomware operations worldwide and the importance of international cooperation in these efforts.
References: 1. BBC News 2. Le Figaro 3. CyberScoop 4. Kyiv Post 5. Cybersecurity Dashboard 6. U.S. State Department
- This individual's arrest demonstrates the ongoing international focus on general-news incidents, such as cybercrime and cybersecurity, particularly in relation to technology and crime-and-justice issues.
- The arrested hacker is believed to have been involved in several cyberattacks, highlighting the destructive impact of ransomware groups like Lockbit on both technology infrastructure and the vulnerable data they target.
