Dmitriy Yurevich KHOROSHEV

Prohibition/Restriction

Redacted for Security Reasons

sam.gov

CYBER2 and block

Secondary sanctions risk: Ukraine-/Russia-Related Sanctions Regulations, 31 CFR 589.201

Executive Order 13694 (Cyber)

Programme US-CYBReference 48603treasury.govofac.treasury.gov

Director Disqualification Sanction, travel ban and asset freeze

Dmitry Yureyvich KHOROSHEV is or has been involved in relevant cyber activity in that he has been responsible for, engaged in, provided support for or promoted the commission, planning or preparation of relevant cyber activity, or provided technical assistance that could contribute to relevant cyber activity. In particular, KHOROSHEV has been the primary user of the online moniker and public facing identity LockBitSupp. We assess that KHOROSHEV is a senior leader of the LockBit ransomware group and was centrally involved in the administration, its infrastructure and operations. KHOROSHEV, has been a significant direct financial beneficiary of LockBit ransomware activity. LockBit are responsible for ransomware attacks against thousands of victims around the world, including in the UK, which have been estimated to result in billions of dollars of losses globally, impacting businesses and the livelihoods of ordinary citizens. LockBit has conducted or enabled malicious ransomware campaigns against a range of targets, involving actual or attempted unauthorised access to and interference with information systems and data, activities which undermined or were intended to undermine the integrity, prosperity or security of the United Kingdom or a country other than the United Kingdom, or directly or indirectly caused or were intended to cause economic loss to or prejudice to the commercial interests of those affected by the activity.

Dmitry Yureyvich KHOROSHEV is or has been involved in relevant cyber activity in that he has been responsible for, engaged in, provided support for or promoted the commission, planning or preparation of relevant cyber activity, or provided technical assistance that could contribute to relevant cyber activity. In particular, KHOROSHEV has been the primary user of the online moniker and public facing identity LockBitSupp. We assess that KHOROSHEV is a senior leader of the LockBit ransomware group and was centrally involved in the administration, its infrastructure and operations. KHOROSHEV, has been a significant direct financial beneficiary of LockBit ransomware activity. LockBit are responsible for ransomware attacks against thousands of victims around the world, including in the UK, which have been estimated to result in billions of dollars of losses globally, impacting businesses and the livelihoods of ordinary citizens. LockBit has conducted or enabled malicious ransomware campaigns against a range of targets, involving actual or attempted unauthorised access to and interference with information systems and data, activities which undermined or were intended to undermine the integrity, prosperity or security of the United Kingdom or a country other than the United Kingdom, or directly or indirectly caused or were intended to cause economic loss to or prejudice to the commercial interests of those affected by the activity.

Programme GB-CYBReference CYB0047Reference 16494Last updated 9 Apr 2025gov.ukgov.uk

Prohibition/Restriction

Redacted for Security Reasons

sam.gov

Prohibition/Restriction

Redacted for Security Reasons

sam.gov

Prohibition/Restriction

Redacted for Security Reasons

sam.gov

Targeted financial sanction and travel ban

Autonomous Sanctions (Designated Persons and Entities and Declared Persons - Thematic Sanctions) Amendment (No. 3) Instrument 2024

Programme AU-CYBLast updated 8 May 2024dfat.gov.audfat.gov.au