Another russian and another $10 million for someone in Russia

Hello folks,

This blog post talks about a guy who is wanted in regards to the credit card checking service, but now we have another one.

Here is some information from one of the paragraphs.

According to the indictment obtained in the District of New Jersey, from at least as early as 2020, Mikhail Pavlovich Matveev, aka Wazawaka, aka m1x, aka Boriselcin, aka Uhodiransomwar, allegedly participated in conspiracies to deploy three ransomware variants. These variants are known as LockBit, Babuk, and Hive, and Matveev transmitted ransom demands in connection with each.

Here is what got me interested in looking at the article.

BrianKrebs: Oh look who just got listed as sanctioned by the U.S. Treasury? Mr. Mikhail Matveev, a.k.a. Boriselcin, a.k.a Wazawaka.

https://ofac.treasury.gov/recent-actions/20230516

I documented Matveev’s various roles as the head or spokesperson for various ransomware groups last year.

https://krebsonsecurity.com/2022/01/who-is-the-network-access-broker-wazawaka/
https://krebsonsecurity.com/2022/02/wazawaka-goes-waka-waka/
Image 1: A still shot from a video produced and published by Mikhail “Wazawaka” Matveev, in which he acknowledges his cybercriminal identity. In this shot, Matveev is holding up a hand to show he only has four fingers on one hand.
Image 2: A screenshot of an announcement May 16 from the US Office of Foreign Assets Control (OFAC) listing Matveev as a cyber-related designation.

• article 1
• article 2

Here is the press release on the suspect.

A second post says:

BrianKrebs: BTW, here’s the DOJ presser on Matveev today, who was indicted in two different jurisdictions for ransomware attacks on govt agencies, schools, and hospitals.

https://www.justice.gov/opa/pr/russian-national-charged-ransomware-attacks-against-critical-infrastructure

There is a standing $10M reward for info leading to Matveev’s arrest and/or prosecution. Alas, he has vowed never to leave Russia.

Russian National Charged with Ransomware Attacks Against Critical Infrastructure is the article and I hope that this finds you well.

According to what I read, unless its here, don’t expect this guy to leave Russia. We need to have these guys charged for their crimes, because it did a lot of damage. They should not be allowed to get away with this type of distruction.

Lock Bit, Babuk and Hive did massive distruction to tons of people and infrastructure. Let’s bring him to justice!