July 18, 2024 Two foreign nationals have pleaded guilty in the US District of New Jersey to their involvement in the LockBit ransomware group, recognized as one of the most prolific ransomware variants worldwide. Ruslan Magomedovich Astamirov, a Russian national, and Mikhail Vasiliev, a dual Canadian and Russian national, and resident of Bradford, Ontario, admitted to deploying LockBit ransomware attacks against numerous victims, including businesses and institutions across the United States and globally. Vasiliev was apprehended in Canada and extradited to the US in May.

Astamirov, 21, and Vasiliev, 34, were key players in the LockBit group, regarded at one point as one of the most active and destructive ransomware group. Lockbit has reportedly extorted approximately $500 million in ransom payments and caused billions of dollars in additional losses to over 2,500 victims in at least 120 countries. Their activities included identifying vulnerable systems, deploying ransomware, and demanding ransoms for decrypting stolen data. When victims failed to pay, the group often left data encrypted and publicly posted sensitive information.

Deputy Attorney General Lisa Monaco praised the convictions as a significant step in disrupting ransomware threats. “Today’s actions serve as a warning to ransomware actors who would attack Americans: we will find you and hold you accountable,” she stated. The convictions follow a concerted effort by the Justice Department, FBI, and international partners to dismantle the LockBit group, including seizing control of their infrastructure and distributing decryption keys to victims.

Astamirov and Vasiliev now face severe penalties, with Astamirov facing up to 25 years in prison and Vasiliev facing up to 45 years. Their guilty pleas underscore the ongoing efforts by U.S. and international law enforcement to bring cybercriminals to justice and safeguard digital security.

For the full details including contacts for victim assistance please refer to the full news release at justice.gov

Story provided with files from Howard Solomon