Mikhail Matveev

Mikhail Matveev, also known by his online pseudonyms "Wazawaka," "m1x," "Boriselcin," and "Uhodiransomwar," is a prominent figure in the cybercrime underworld with previous affiliations to LockBit ransomware. Identified as a 31-year-old from Abaza, Russia, Matveev was initially exposed by KrebsOnSecurity in January 2022 through clues left behind on Russian-language cybercrime forums. He was also a central figure of the Babuk ransomware-as-a-service gang, demonstrating his extensive involvement in malicious cyber activities. In May 2023, two indictments were unsealed in Washington, D.C., and the District of New Jersey, charging Matveev with using different ransomware variants, including LockBit, to attack numerous victims throughout the United States. Among the high-profile targets was the Washington, D.C., Metropolitan Police Department. These charges followed a series of significant attacks against companies and critical infrastructure in the U.S. and other countries, highlighting the extent and severity of Matveev's cybercrimes. The indictment, sanctions, and reward for Matveev were intended to send a strong message to cybercriminals worldwide, according to FBI-Newark special agent in charge James E. Dennehy. The actions against Matveev underline the determination of law enforcement agencies and international partners to pursue such threat actors, even those who believe they can operate with impunity from regions where they feel safe and protected. Despite this, only one other suspect associated with LockBit ransomware, Ruslan Astamirov, has been arrested and charged, leaving Matveev at large.