US charges suspect linked to notorious ransomware gang

Nov 10, 2022, 11:27 AM | Updated: 12:01 pm

WASHINGTON (AP) — A man who authorities say participated in a ransomware campaign that extracted tens of millions of dollars from victims has been charged in the United States, the Justice Department announced Thursday.

Mikhail Vasiliev, a dual national of Russia and Canada, was arrested Wednesday. He is currently in custody in Canada and is awaiting extradition to the U.S. on charges that accuse him of involvement in the Lockbit ransomware operation.

No lawyer for the 33-year-old Vasiliev, of Bradford, Ontario, Canada was listed on the court docket. He faces charges of conspiracy to intentionally damage protected computers and to transmit ransom demands.

Lockbit has been one of the most prolific strains of ransomware. During the first five months of this year it accounted for 46% of all ransomware-related breaches that were publicized on extortion sites used by the syndicate to pressure victims by threatening to publicly leak stolen data, according to the cybersecurity firm Palo Alto Networks.

Its top victims have been in the U.S., Italy and Germany, where it targeted a gamut of industries from manufacturing to retail.

The Justice Department says that between January 2020 and the present, LockBit members have conducted at least 1,000 ransomware attacks — in which hackers hold victims’ data hostage through encryption until a sum is paid — in the U.S. and around the world. Prosecutors said the hackers made at least $100 million in ransom demands and extracted tens of millions of dollars in payments.

Deputy Attorney General Lisa Monaco said in a statement that the arrest was the “result of over two-and-a-half-years of investigation into the LockBit ransomware group.”

According to court documents made public Thursday, Canadian law enforcement searched Vasiliev’s home and discovered a file named “TARGETLIST” on a device. One of the victims named on that list was a business in New Jersey, where the Justice Department filed the case, the documents say.

Law enforcement did another search in October, when they said they found on a laptop computer an open tab pointed to a site called “LockBit LOGIN.”


Associated Press writer Frank Bajak in Boston contributed to this report.

Copyright © The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.


Sen. Tommy Tuberville, R-Ala., listens to a question during a news conference, March 30, 2022, in W...

Associated Press

Tuberville is ending blockade of most military nominees, clearing way for hundreds to be approved

Sen. Tommy Tuberville announced Tuesday that he's ending his blockade of hundreds of military promotions, following heavy criticism.

7 hours ago

An employee works inside the Hanwha Qcells Solar plant on Oct. 16, 2023, in Dalton, Ga. On Tuesday,...

Associated Press

US job openings fall to lowest level since March 2021 as labor market cools

U.S. employers posted 8.7 million job openings in October, the fewest since March 2021, in a sign that hiring is cooling.

8 hours ago

Megyn Kelly poses at The Hollywood Reporter's 25th annual Women in Entertainment Breakfast, Dec. 7,...

Associated Press

The fourth GOP debate will be a key moment for the young NewsNation cable network

By airing the fourth Republican presidential debate, NewsNation network will almost certainly reach the largest audience in its history.

9 hours ago

Lead water pipes pulled from underneath the street are seen in Newark, N.J., Oct. 21, 2021. (AP Pho...

Associated Press

Biden to require cities to replace harmful lead pipes within 10 years

The Biden administration has previously said it wants all of the nation's roughly 9 million lead pipes to be removed, and rapidly.

5 days ago

Facebook's Meta logo sign is seen at the company headquarters in Menlo Park, Calif., on, Oct. 28, 2...

Associated Press

Meta shuts down thousands of fake Facebook accounts that were primed to polarize voters ahead of 2024

Meta said it removed 4789 Facebook accounts in China that targeted the United States before next year’s election.

5 days ago

A demonstrator in Tel Aviv holds a sign calling for a cease-fire in the Hamas-Israel war on Nov. 21...

Associated Press

Hamas releases a third group of hostages as part of truce, and says it will seek to extend the deal

The fragile cease-fire between Israel and Hamas was back on track Sunday as the first American was released under a four-day truce.

10 days ago

Sponsored Articles

Follow @KTAR923...

Valley residents should be mindful of plumbing ahead of holidays

With Halloween in the rear-view and more holidays coming up, Day & Night recommends that Valley residents prepare accordingly.

Follow @KTAR923...

The best ways to honor our heroes on Veterans Day and give back to the community

Veterans Day is fast approaching and there's no better way to support our veterans than to donate to the Military Assistance Mission.

Follow @KTAR923...

West Hunsaker at Morris Hall supports Make-A-Wish Foundation in Arizona

KTAR's Community Spotlight this month focuses on Morris Hall and its commitment to supporting the Make-A-Wish Foundation in Arizona.

US charges suspect linked to notorious ransomware gang