Ethical hacker exposes private details about Lockbit hacker leader’s life

The identity of the leader of the Lockbit hacker gang, the most wanted cybercriminal on the planet, was revealed on May 7 by law enforcement. A cyber expert went in search of information on this Russian national.

Just half an hour after the law enforcement press release revealing the identity of the leader of the Lockbit hackers, a cyber expert has already found information on the much sought-after cybercriminal. This May 7, the FBI, the British police and Europol revealed the face and name of the leader of the hackers in a press release as well as on the former darknet platform of cybercriminals, today in the hands of the police.

Advertisement

Dmitry Khoroshev, aka LockBitSupp, lived anonymously and offered a $10 million reward to anyone who revealed his identity, will now be subject to a series of asset freezes and travel bans » we can read in the press release. Lockbit is the most prolific hacker gang in the cybercrime space with over 7,000 attacks carried out in two years. In France, the Corbeil-Essonnes hospital and, more recently, that of Cannes were victims of these hackers.

Dmitry Khoroshev, a 31-year-old Russian national, has long kept his identity a mystery. Now that it is revealed to everyone, investigators of all kinds can go looking for the slightest information on him. Baptiste Robert, a French ethical hacker, at the head of Predicta Search a platform to find information on the web, published on (ex twitter) a post with information about Dmitry Khoroshev.

A cybercriminal with his face exposed on social networks

Using two email addresses provided by the police forces, Baptiste Robert looked at the registered accounts linked to these addresses. He came across a Yandex Food account, the equivalent of Uber Eats in Russia, with a phone number. This same number has already been used for a Facebook account.

Even more interesting, his phone was linked to a Vkontakte account, Russia's most used social network. “ Social media accounts can be found very quickly once you have the email. From there we can trace his entire digital life » explains Baptiste Robert.

Advertisement

Dmitry Khoroshev's VKontakte account. // Source: Baptiste Robert
Dmitry Khoroshev's VKontakte account. // Source: Baptiste Robert

The Dmitry Khoroshev profile is public and the cybercriminal does not hide his identity at all. His friends list is also freely accessible. Some profile photos indicate that people close to Dmitry Khoroshev are dressed in Russian army uniforms. Law enforcement could also look into his friends list for links to Lockbit. “ He's someone quite young (31 years). He has old Vkontakt accounts on which he posted a lot of nonsense » Baptiste Robert tells us.

Dmitry Khoroshev says he lives in Voronezh, a Russian metropolis 400k south of Moscow. The cybercriminal is also the head of a company “Tkaner LLC”. This is registered in Voronezh. Yandex Food orders seem to confirm that he lives in this city according to Baptiste Robert.

An address registered for Dmitry Khoroshev's company. // Source: Baptiste RobertAn address registered for Dmitry Khoroshev's company. // Source: Baptiste Robert
An address registered for Dmitry Khoroshev's company. // Source: Baptiste Robert

The ethical hacker also found a comment on his last car purchase, an SUV, a Mercedes-AMG GLE.

An automobile with the identified plate. // Source: Baptiste RobertAn automobile with the identified plate. // Source: Baptiste Robert
An automobile with the identified plate. // Source: Baptiste Robert

One of Dmitry Khoroshev's passions may be gardening: several blog articles on the maintenance of soups were found from the email address. What's better than taking care of vegetables after extorting millions of euros.


Advertisement