MANTRA (om) 
The Treasury’s Office of Foreign Assets Control (OFAC) has sanctioned Russian developer Dmitry Khoroshev, the creator of the LockBit ransomware program. According to Chainalysis, Khoroshev transferred cryptocurrency to various illicit services, including the sanctioned Russian exchange, Garantex.
Chainalysis revealed that Khoroshev, also known as LockBitSupp, frequently interacted with sanctioned Russian crypto services like Garantex and Bitzlato. One of his Bitcoin addresses received “several thousands of dollars” in crypto from a mixing service to his personal wallet.
The on-chain activity of the address shows that it received over 0.75 BTC, equivalent to around $36,000 at current prices. U.S. attorney Philip Sellinger for the District of New Jersey noted that Khoroshev personally pocketed $100 million extorted from LockBit’s victims. The full list of crypto addresses associated with Khoroshev has not been disclosed.
According to Chainalysis, Khoroshev transferred funds to various illicit services, including OFAC-sanctioned services like Russian exchange Garantex, crypto mixer Sinbad, and Bitzlato. The U.S. Department of Justice alleges that Khoroshev acted as the developer and administrator of the LockBit ransomware group, which targeted over 2,500 victims in at least 120 countries, with 1,800 victims in the U.S.
The group extracted at least $500 million in ransom payments from their victims and caused billions of dollars in broader losses. OFAC also sanctioned two pro-Kremlin supporters with ties to Garantex.
