Russian authorities have arrested Mikhail Matveev, a notorious hacker known as “Wazawaka,” for his alleged involvement in multiple ransomware gangs. Matveev, who is also known by various aliases such as m1x, Boriselcin, and Uhodiransomwar, has been charged with creating malware used to extort companies. The U.S. government had previously indicted Matveev in January 2023, offering a $10 million reward for information leading to his arrest.
According to U.S. prosecutors, Matveev worked with at least three different ransomware gangs that extorted hundreds of millions of dollars from various organizations, including companies, schools, hospitals, and government agencies. The Russian Interior Ministry stated that a 32-year-old hacker had been charged with violating domestic laws against the creation and use of malicious software. Although the announcement did not name the accused, anonymous sources from the Russian state news agency RIA Novosti identified the detained man as Matveev.
Matveev’s hacker identities were known for their openness and activity on numerous cybercrime forums.
Arrest of ransomware figure Matveev
His Twitter profile (@ransomboris) even featured a picture of a t-shirt with the U.S. government’s “Wanted” poster for him.
Cyber intelligence firm Intel 471 suggested that Matveev’s arrest raises more questions than answers, speculating that Russia’s motivation might extend beyond surface-level actions. They noted that while Russia’s court system is opaque, Matveev would likely be open about the proceedings, particularly if he pays a toll and is allowed to continue his cyber activities. Russia has recently brought charges against several alleged ransomware actors, despite traditionally not putting much effort into pursuing cybercriminals within its borders.
Earlier this year, Russian authorities arrested two men for allegedly operating the Sugarlocker ransomware program in 2021, with one of them, Aleksandr Ermakov, being sentenced to two years probation. It remains to be seen whether Matveev’s arrest will lead to meaningful progress against ransomware or if it is merely a shakedown by local authorities. The case highlights the complex nature of cybercrime and the challenges faced by law enforcement agencies in combating it.
