Although there has been no arrest of LockBitSupp, the disruption of LockBit3.0 was accompanied by some arrests and indictments in various countries:
United States:
The U.S. Department of Justice unsealed indictments against two Russian men: Artur Sungatov allegedly used LockBit ransomware against victims. And Ivan Gennadievich Kondratyev, a.k.a. “Bassterlord,” allegedly used LockBit ransomware against targets in the United States and elsewhere. Kondratyev had been previously charged in a sealed indictment in New Jersey in May of 2022. This week, the government unsealed a second indictment in the Northern District of California. Neither Sugnatov nor Kondratyev have been arrested. In May 2023, the U.S. unsealed indictments against two other alleged affiliates: Mikhail “Wazawaka” Matveev and Mikhail Vasiliev. The latter is in custody in Canada awaiting extradition to the U.S. And in June, 2023, the U.S. announced charges against a Russian national, Ruslan Magomedovich Astamirov.
France:
Operation Cronos reported that instructive judges of the Paris Judicial Court have issued three arrest warrants against three alleged members of LockBit. Two Russian nationals and one Polish national have been charged.
- One arrest warrant issued in November 2022 against one Russian Lockbit affiliate. This individual has been arrested.
- One arrest warrant issued on the 20th February 2024 against a Polish money laundering actor linked to 30 ransom payments. This individual has been arrested.
- One arrest warrant issued on the 20th February 2024 against one Russian Lockbit affiliate.
(Because of the French legal framework relating to the secrecy of investigations, no element of identification can be made public at this stage)
Ukraine:
It’s all in the family. A father and son were reportedly arrested and charged with being involved with LockBit.
Poland:
In Warsaw, activities were carried out in the presence of French gendarmerie officers and an analyst from Europol. As a result of joint activities, a 38-year-old man was detained on the basis of a European Arrest Warrant. After completing the procedural activities, he was taken to the prosecutor’s office, where he was charged with criminal offenses.