mikhail matveev – PossibleThreat Articles

U.S. Offered $10M for Hacker Just Arrested by Russia

December 4, 2024 0 Comments aleksandr ermakov, boriselcin, daryna antoniuk, intel 471, mikhail lenin, mikhail matveev, mikhail shefel, Ne'er-Do-Well News, rescator, shtazi-it, sugarlocker, wazawaka

Credit to Author: BrianKrebs| Date: Wed, 04 Dec 2024 14:08:45 +0000

In January 2022, KrebsOnSecurity identified a Russian man named Mikhail Matveev as “Wazawaka,” a cybercriminal who was deeply involved in the formation and operation of multiple ransomware groups. The U.S. government indicted Matveev as a top ransomware purveyor a year later, offering $10 million for information leading to his arrest. Last week, the Russian government reportedly arrested Matveev and charged him with creating malware used to extort companies.

Independent Krebs Security

The Not-So-Secret Network Access Broker x999xx

July 3, 2024 0 Comments Breadcrumbs, cobalt strike, cobaltforce, constella intelligence, dashin2008@yahoo.com, flashpoint, intel 471, kirtsov@telecom.ozersk.ru, lockbit, maksim georgievich kirtsov, maksya@icloud.com, maxnmalias-1@yahoo.com, mikhail matveev, Ne'er-Do-Well News, operation endgame, osint.industries, ozersk technological institute national research nuclear university, recorded future, u.s. department of justice, wazawaka, x999xx, Кирцов Максим Георгиевич

Credit to Author: BrianKrebs| Date: Wed, 03 Jul 2024 16:41:34 +0000

Most accomplished cybercriminals go out of their way to separate their real names from their hacker handles. But among certain old-school Russian hackers it is not uncommon to find major players who have done little to prevent people from figuring out who they are in real life. A case study in this phenomenon is “x999xx,” the nickname chosen by a venerated Russian hacker who specializes in providing the initial network access to various ransomware groups.

Independent Krebs Security

Feds Seize LockBit Ransomware Websites, Offer Decryption Tools, Troll Affiliates

February 28, 2024 0 Comments artur sungatov, bassterlord, europol, FBI, ivan gennadievich kondratyev, lockbit, lockbitsupp, mark stockley, mikhail matveev, mikhail vasiliev, nca, Ne'er-Do-Well News, operation cronos, prodaft, Ransomware, ruslan magomedovich astamirov, u.k. national crime agency

Credit to Author: BrianKrebs| Date: Tue, 20 Feb 2024 17:09:00 +0000

U.S. and U.K. authorities have seized the darknet websites run by LockBit, a prolific and destructive ransomware group that has claimed more than 2,000 victims worldwide and extorted over $120 million in payments. Instead of listing data stolen from ransomware victims who didn’t pay, LockBit’s victim shaming website now offers free recovery tools, as well as news about arrests and criminal charges involving LockBit affiliates.

Independent Krebs Security

Who is the Network Access Broker ‘Wazawaka?’

February 2, 2022 0 Comments 902228, abakan, abaza, Breadcrumbs, constella intelligence, cs-arena.org, darkside, ddosis.ru, devdelphi@yandex.ru, domaintools, flashpoint, initial access broker, kopyovo-a, lockbit, mikhail matveev, mikhail mix matveev, mix@devilart.net, mixfb@yandex.ru, Ne'er-Do-Well News, Ransomware, uhodiransomware, wazawaka

Credit to Author: BrianKrebs| Date: Wed, 12 Jan 2022 05:17:31 +0000

In a great many ransomware attacks, the criminals who pillage the victim’s network are not the same crooks who gained the initial access to the victim organization. More commonly, the infected PC or stolen VPN credentials the gang used to break in were purchased from a cybercriminal middleman known as an initial access broker. This post examines some of the clues left behind by Wazawaka, the handle chosen by a major access broker in the Russian-speaking cybercrime scene.