Mikhail Matveev

Mikhail Matveev, also known by the aliases Wazawaka, m1x, Boriselcin, and Uhodiransomwar, is a prominent threat actor associated with significant cybercrime activities. His involvement in the cybercrime world was traced back to 2020 and 2021 when he was identified as an affiliate of LockBit, a notorious ransomware group that has been active since 2019. The group's extensive victim list includes major organizations such as Bank of America and the UK Royal Mail. In January 2022, KrebsOnSecurity identified Matveev as a 32-year-old from Khakassia, Russia, linking him to the pseudonym Wazawaka. In May 2023, Matveev was charged in two indictments unsealed in Washington, D.C., and the District of New Jersey. The charges related to his use of various ransomware variants, including LockBit, to attack multiple victims across the United States, notably the Washington, D.C., Metropolitan Police Department. Matveev was also a central figure in the Babuk ransomware-as-a-service gang. These indictments followed the sanctioning of Matveev due to his affiliation with LockBit. Despite the indictments, only a few suspects, including Ruslan Astamirov and Matveev, have been named and charged in connection with the LockBit ransomware attacks. Only Astamirov has been arrested thus far. The FBI has issued a strong warning to these cybercriminals, emphasizing their commitment to pursuing such malicious actors globally. They aim for the indictment, sanctions, and reward for information on Matveev to serve as a deterrent to cybercriminals worldwide, demonstrating that no country can provide them with complete safety or protection.