--- title: How Did Authorities Identify the Alleged Lockbit Boss? –... description: Authorities have identified Dmitry Yuryevich Khoroshev as the leader of the LockBit ransomware group. Khoroshev allegedly created and used the LockBit... canonical: https://daily.dev/posts/how-did-authorities-identify-the-alleged-lockbit-boss-krebs-on-security-2l2ba5oln twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: How Did Authorities Identify the Alleged Lockbit Boss? – Krebs on Security | daily.dev og:description: Authorities have identified Dmitry Yuryevich Khoroshev as the leader of the LockBit ransomware group. Khoroshev allegedly created and used the LockBit... og:url: https://daily.dev/posts/how-did-authorities-identify-the-alleged-lockbit-boss-krebs-on-security-2l2ba5oln og:image: https://api.daily.dev/og/posts/2L2Ba5olN.png og:image:alt: How Did Authorities Identify the Alleged Lockbit Boss? – Krebs on Security og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # How Did Authorities Identify the Alleged Lockbit Boss? – Krebs on Security **[Krebs on Security](https://daily.dev/sources/krebsonsecurity)** · 10 min read · 2 upvotes · 0 comments ## Summary Authorities have identified Dmitry Yuryevich Khoroshev as the leader of the LockBit ransomware group. Khoroshev allegedly created and used the LockBit ransomware to extort money from victim organizations. He operated LockBit as a ransomware-as-a-service operation, taking a percentage of the ransom payments. Khoroshev has a history of involvement in cybercrime activities, including creating malware and selling malicious code. He used various aliases, such as NeroWolfe and Putinkrab, on cybercrime forums. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Don’t just attend KubeCon \+ CloudNativeCon, Merge Forward your experience\!](https://daily.dev/posts/don-t-just-attend-kubecon-cloudnativecon-merge-forward-your-experience--l0rpp73x8) · CNCF · 0 upvotes · 0 comments - [Announcing H2 2026 KCDs](https://daily.dev/posts/announcing-h2-2026-kcds-m96goajm1) · CNCF · 1 upvotes · 0 comments - [Two months of Open Community Groups](https://daily.dev/posts/two-months-of-open-community-groups-asf52zhbs) · CNCF · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#malware](https://daily.dev/tags/malware), [#ransomware](https://daily.dev/tags/ransomware), [#lockbit](https://daily.dev/tags/lockbit) [View this post on daily.dev](https://daily.dev/posts/how-did-authorities-identify-the-alleged-lockbit-boss-krebs-on-security-2l2ba5oln) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"How Did Authorities Identify the Alleged Lockbit Boss? – Krebs on Security","url":"https://daily.dev/posts/how-did-authorities-identify-the-alleged-lockbit-boss-krebs-on-security-2l2ba5oln","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/how-did-authorities-identify-the-alleged-lockbit-boss-krebs-on-security-2l2ba5oln"},"datePublished":"2024-05-13T11:38:13.953Z","dateModified":"2024-05-13T11:38:13.329Z","description":"Authorities have identified Dmitry Yuryevich Khoroshev as the leader of the LockBit ransomware group. Khoroshev allegedly created and used the LockBit...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/3031b9d948c0e1eff22db036581007ad?_a=AQAEuiZ","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/3031b9d948c0e1eff22db036581007ad?_a=AQAEuiZ","isAccessibleForFree":true,"articleSection":"Krebs on Security","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Krebs on Security","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/deb3e417ddef4d0e8cc4d704becf6004","url":"https://daily.dev/sources/krebsonsecurity"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/how-did-authorities-identify-the-alleged-lockbit-boss-krebs-on-security-2l2ba5oln","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":2},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,malware,ransomware,lockbit","timeRequired":"PT10M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Krebs on Security","item":"https://daily.dev/sources/krebsonsecurity"},{"@type":"ListItem","position":3,"name":"How Did Authorities Identify the Alleged Lockbit Boss? – Krebs on Security"}]} ```