The United States has extradited Rostislav Panev, a dual Russian-Israeli national, from Israel to face charges related to his alleged involvement with the LockBit ransomware group. Panev, 51, is accused of playing a key role in developing and operating LockBit’s malware infrastructure, according to the U.S. Department of Justice (DOJ).
Panev has been charged with conspiracy to commit wire fraud, intentional damage to protected computers, and extortion through ransomware attacks. U.S. authorities allege that Panev was involved in LockBit’s operations, which have affected more than 2,500 organizations across 120 countries, including over 1,800 victims in the United States.
According to the DOJ, Panev received over $230,000 in cryptocurrency from LockBit’s primary operators, which was allegedly laundered through cryptocurrency mixers to conceal its origin.
Inside LockBit’s Operation
LockBit has been one of the most dangerous ransomware groups globally since its existence in 2019. The group has extorted an estimated $500 million in ransom payments and caused billions of dollars in operational losses.
Investigators found that Panev had administrative access to a repository hosting LockBit’s ransomware builder tool, which allowed affiliates to create customized versions of the malware. Panev’s computer also contained source code for StealBit, a data-exfiltration tool used by LockBit to extract sensitive information from targeted systems.
Crackdown on LockBit Network Following Panev Arrest and Extradition
Panev was arrested in Haifa, Israel, in August 2024 after the United States requested his provisional arrest. Following months of legal proceedings, Panev was extradited to the U.S. and made his initial appearance in a New Jersey district court on March 15, 2025.
Panev is the third alleged LockBit member to be detained in connection with the group’s activities. Russian-Canadian national Mikhail Vasiliev was arrested in Canada and awaits extradition, while Russian citizen Ruslan Magomedovich Astamirov remains in U.S. custody, awaiting trial.
Authorities are also pursuing Dmitry Khoroshev, believed to be the leader of LockBit. The U.S. Department of State has offered a $10 million reward for information leading to Khoroshev’s arrest.
Global Cybersecurity Impact
The DOJ emphasized that Panev’s extradition reflects ongoing international cooperation to target ransomware groups operating on a global scale.
“If you are part of the LockBit ransomware conspiracy, we will find you and hold you accountable,” said U.S. Attorney John Giordano.
The extradition is proof of the increasing focus of global law enforcement on combating ransomware threats and protecting critical infrastructure from cyberattacks.