A dual Russian-Israeli national accused of aiding one of the world’s most notorious ransomware groups, LockBit, is in custody in Israel, awaiting extradition to the United States. Rostislav Panev, 51, was arrested in August under a U.S. provisional request and faces charges outlined in a newly unsealed superseding criminal complaint in the District of New Jersey.
In a statement released on Friday, Attorney General Merrick Garland highlighted the Justice Department’s efforts against ransomware networks. “Three of the individuals who we allege are responsible for LockBit’s cyberattacks against thousands of victims are now in custody,” Garland said. “We will continue to work alongside our partners to hold accountable all those who lead and enable ransomware attacks.”
Deputy Attorney General Lisa Monaco underscored the international scope of the investigation. “This case is a model for ransomware investigations in the years to come,” she said, praising partnerships with Europol, Israel, and other nations. FBI Director Christopher Wray added, “The FBI remains committed to safeguarding the cyber ecosystem and holding those responsible accountable.”
Panev is accused of developing malware and maintaining infrastructure for LockBit, which has executed over 2,500 attacks in 120 countries since 2019, causing billions in damages. The group’s targets ranged from schools and hospitals to critical infrastructure and multinational corporations. LockBit’s developers and affiliates reportedly extorted more than $500 million in ransom payments.
“As alleged, Panev helped create the digital weapons that enabled LockBit’s devastation worldwide,” said U.S. Attorney Philip Sellinger of the District of New Jersey. “He must now answer for his crimes.”
The superseding complaint revealed that law enforcement seized Panev’s computer during his arrest, uncovering administrator credentials for LockBit’s infrastructure, including source codes for ransomware tools. Panev allegedly admitted to developing malware designed to disable antivirus software and spread LockBit across victim networks.
The arrest follows a February operation by the U.K.’s National Crime Agency, in coordination with the FBI and other partners, which disrupted LockBit’s infrastructure. Panev is among seven LockBit members charged in the U.S., three of whom are in custody.
Victims of LockBit are encouraged to report incidents through the FBI’s IC3 website. Law enforcement may assist victims with decrypting affected systems. For updates on the case and victim rights, visit the Justice Department’s website.
Panev remains innocent until proven guilty in a court of law. A reward of up to $10 million is offered for information leading to the arrest of other LockBit leaders, reflecting continued efforts to dismantle the group.
