Cybercrime

Russian Hacker With $10 Million Bounty on His Head Reportedly Arrested

Russian authorities have reportedly arrested Mikhail Matveev, who is wanted by the US for ransomware attacks against critical infrastructure.

Hacker arrested

Russian authorities have reportedly arrested Mikhail Pavlovich Matveev, a 32-year-old man from Russia who is wanted by the United States over his alleged role in ransomware attacks.

Russian state-owned news agency RIA Novosti reported last week that local prosecutors had announced charges against a man accused of creating a malicious program, specifically one designed to encrypt the data of commercial organizations. 

RIA Novosti learned from sources that the suspect is Mikhail Pavlovich Matveev [Russian language article].

Matveev has been known online as Wazawaka, m1x, Boriselcin, and Uhodiransomwar. Cybersecurity blogger Brian Krebs revealed that Wazawaka was Matveev in early 2022, which the man later confirmed to be accurate.

The FBI added him to its most wanted list in May 2023. The US Justice Department at the time announced charges against Matveev over his alleged role in LockBit, Hive and Babuk ransomware attacks. 

He is believed to have been involved in ransomware attacks aimed at thousands of entities in the US and elsewhere, including critical infrastructure organizations such as hospitals, airlines, and government organizations.  

Advertisement. Scroll to continue reading.

Also in May 2023, the US Treasury Department announced sanctions against the Russian national and the Department of State announced a bounty of up to $10 million for information leading to Matveev’s arrest.

It appears that the Russian government has started cracking down on local cybercriminals. A Russian news agency reported last month that a court had sentenced four members of the  REvil ransomware group to prison. 

Related: Russian National Arrested, Charged in US Over Role in LockBit Ransomware Attacks

Related: US Announces Charges, Sanctions Against Russian Administrator of Carding Website

Related: Russian Phobos Ransomware Operator Extradited to US

Related: Russia Arrests 96 People Tied to US-Disrupted Cryptocurrency Exchanges

Related Content

Threat Intelligence

Rapid7’s Q3 analysis finds high-severity flaws exploited within three days on average, while AI appeared in just 8% of tracked incidents.

Cybercrime

Investigators stormed 40 locations in Texas and seized 187 laptops used by North Korean IT workers to hide their location.

Cybercrime

The suspect is believed to be Edward Dubrovsky, a Canadian cybersecurity executive who was visiting the United States for a conference.

Cybercrime

Zohar Pinhasi was paying ransoms to obtain decryption keys and then charging victims substantially more for remediation.

Cybercrime

The individual was detained in May and has been extradited to Germany to face hacking charges.

Cybercrime

An alleged leader of Tren de Aragua’s ATM jackpotting activities, Canelon Aguirre was on the FBI’s top 10 most wanted list since March 2026.

Data Breaches

Hackers stole patient information from Clover Health Investments and AngMar Management Services in July.

Cybercrime

Known as Rey, the suspect is reportedly helping the FBI identify and locate other members of the extortion group.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version