• About Us
  • Contact Us
  • Editorial Calendar
  • Careers
  • The Cyber Express by Cyble Vulnerability Disclosure Policy
  • Cyble Trust Portal
The Cyber Express
  • MagazineDownload
  • Firewall Daily
    • All
    • Bug Bounty & Rewards
    • Dark Web News
    • Data Breach News
    • Hacker News
    • Ransomware News
    • Vulnerabilities
    AI-Powered Bots

    AI-Powered Bots Are Blurring the Line Between Users and Cyber Threats

    Software Supply Chain Attack, Supply Chain Attack, Mini Shai-Hulud, NCSC, CI/CD

    The NHS Was Lucky. The Next Victim Might Not Be.

    META Threat Landscape Report

    Ransomware and Geopolitical Tensions Drive Cyber Threats Across META in Q1 2026

    Qilin

    Ransomware Attacks Surge 30% in 2026 as Qilin and INC Ransom Intensify Operations

    CVE-2025-48595

    Google Patches Android Zero-Day CVE-2025-48595 Exploited in Targeted Attacks

    Miasma

    Miasma Malware Targets Red Hat npm Packages in New Supply Chain Attack

    CVE-2026-41089

    Threat Actors Target Critical Windows Netlogon Flaw CVE-2026-41089

    ChatGPhish

    New ChatGPhish Technique Uses Prompt Injection to Manipulate ChatGPT Responses

    OSM vulnerability

    CBSE Engages IIT Experts After Admitting OSM Security Vulnerabilities

    Trending Tags

    • blackbyte ransomware
    • Ransomware
    • lapsus$ ransomware
    • Apple
    • Apple vulnerability
  • Essentials
    • All
    • Compliance
    • Governance
    • Policy Updates
    • Regulations
    Crypto Scam, Crypto

    New Threat Actor Targets Crypto Firms’ Development Infrastructure

    Pink, Pink Extortion, CL-CRI-1147

    Pink Extortion Group Emerges Targeting Microsoft 365 Data

    AI-Powered Bots

    AI-Powered Bots Are Blurring the Line Between Users and Cyber Threats

    AI-Native Cybersecurity

    Why AI-Native Cybersecurity Matters in the Age of Machine-Speed Threats

    First VPN, First VPN seized, VPN Seized, FBI, France, Dutch, Law Enforcement,

    European Agencies Shutter VPN Service Used for Ransomware Attacks

    cyber security device

    UK Cybersecurity Innovation SilentGlass Goes Global After Licensing Deal

    Viral Energy Drink Videos

    Dubai Police Warns Against Viral Energy Drink Videos Targeting Children on Social Media

    Agentic AI Deployment

    NCSC Calls for Tight Security and Human Oversight as Agentic AI Use Expands

    Shadow AI Is Growing in Silence

    Shadow AI Is Growing in Silence While Enterprise Security Falls Behind

    • Regulations
    • Compliance
    • Governance
    • Policy Updates
  • Knowledge Hub
    • All
    • How to
    • What is
    Google Chrome

    How to Remove Saved Passwords From Google Chrome (And Why You Should)

    DPDP Rules, Cyble, DPDP Act, Cyble Vantage

    How Cyble’s Front-Row Vantage Can Help You in Complying to India’s DPDP Act

    Cybersecurity Countries

    The Top 8 Countries Leading the Cyber Defense Race in 2025

    link building

    The Link Building Secrets Your Competitors Don’t Want You to Know

    Supply Chain Attack

    Supply Chain Resilience and Physical Security: Lessons for 2025

    Healthcare cybersecurity trends of 2024

    Healthcare Cybersecurity: 2024 Was Tough, 2025 May Be Better

    CEO's Guide to Take-Down Services

    Shield Your Organization: CEO’s Perspective on Take-Down Services

    Azure sign-in Microsoft

    Microsoft Announces Mandatory MFA for Azure Sign-ins to Bolster Cloud Defenses

    Signal Proxy, Signal, Signal Ban in Russia, Signal Ban in Venezuela, Bypass Signal Ban, How to Activate Signal Proxy, Signal Proxy Server

    How to Set Up Signal Proxy to Help Bypass Censorship in Russia and Venezuela

  • Features
    • Cyber Warfare
    • Espionage
    • Workforce
      • Learning & Development
  • Business
    • All
    • Appointments
    • Budgets
    • Mergers & Aquisitions
    • Partnerships
    • Press Release
    • Startups
    AI Chip, Chip Security Act

    Congress Wants a GPS Tracker on Every Advanced AI Chip America Exports

    Fraud, Agentic AI, AI-assisted Cyberattacks

    Agentic AI Run Fraud Campaigns Earning 4.5 Times More: Interpol

    Stryker, Stryker Cyberattack, CISA, Handala

    Stryker Says Cyberattack Disrupted Processing, Manufacturing and Shipping

    INC Ransom, Western Critical Infrastructure, Critical infrastructure, Russian GRU, Russian Threat Actor, Sandworm, APT44, Energy Supply Chain, Energy Infrastructure

    INC Ransom’s Franchise Model Is Putting Critical Infrastructure on the Chopping Block

    Terrorist Cyberattacks, UAE Cyber Security Council

    UAE Blocked AI-Powered Terrorist Cyberattacks Targeting Critical Infrastructure

    Eurail Breach, Eurail

    Eurail Breach Escalates as Stolen Passport Data and IBANs Surface on Dark Web for Sale

    Discord teen-by-default settings

    Discord Introduces Stronger Teen Safety Controls Worldwide

    The Cyber Express cybersecurity roundup

    The Cyber Express Weekly Roundup: FortiOS Exploits, Ransomware, Hacktivist Surge, and EU Telecom Rules

    Nicole Ozer appointment

    Nicole Ozer Joins CPPA to Drive Privacy and Digital Security Initiatives

    • Startups
    • Mergers & Aquisitions
    • Partnerships
    • Appointments
    • Budgets
    • Research
      • Whitepapers
      • Sponsored Content
      • Market Reports
    • Interviews
      • Podcast
  • Events
    • Conference
    • Webinar
    • Endorsed Events
  • Advisory Board
No Result
View All Result
  • MagazineDownload
  • Firewall Daily
    • All
    • Bug Bounty & Rewards
    • Dark Web News
    • Data Breach News
    • Hacker News
    • Ransomware News
    • Vulnerabilities
    AI-Powered Bots

    AI-Powered Bots Are Blurring the Line Between Users and Cyber Threats

    Software Supply Chain Attack, Supply Chain Attack, Mini Shai-Hulud, NCSC, CI/CD

    The NHS Was Lucky. The Next Victim Might Not Be.

    META Threat Landscape Report

    Ransomware and Geopolitical Tensions Drive Cyber Threats Across META in Q1 2026

    Qilin

    Ransomware Attacks Surge 30% in 2026 as Qilin and INC Ransom Intensify Operations

    CVE-2025-48595

    Google Patches Android Zero-Day CVE-2025-48595 Exploited in Targeted Attacks

    Miasma

    Miasma Malware Targets Red Hat npm Packages in New Supply Chain Attack

    CVE-2026-41089

    Threat Actors Target Critical Windows Netlogon Flaw CVE-2026-41089

    ChatGPhish

    New ChatGPhish Technique Uses Prompt Injection to Manipulate ChatGPT Responses

    OSM vulnerability

    CBSE Engages IIT Experts After Admitting OSM Security Vulnerabilities

    Trending Tags

    • blackbyte ransomware
    • Ransomware
    • lapsus$ ransomware
    • Apple
    • Apple vulnerability
  • Essentials
    • All
    • Compliance
    • Governance
    • Policy Updates
    • Regulations
    Crypto Scam, Crypto

    New Threat Actor Targets Crypto Firms’ Development Infrastructure

    Pink, Pink Extortion, CL-CRI-1147

    Pink Extortion Group Emerges Targeting Microsoft 365 Data

    AI-Powered Bots

    AI-Powered Bots Are Blurring the Line Between Users and Cyber Threats

    AI-Native Cybersecurity

    Why AI-Native Cybersecurity Matters in the Age of Machine-Speed Threats

    First VPN, First VPN seized, VPN Seized, FBI, France, Dutch, Law Enforcement,

    European Agencies Shutter VPN Service Used for Ransomware Attacks

    cyber security device

    UK Cybersecurity Innovation SilentGlass Goes Global After Licensing Deal

    Viral Energy Drink Videos

    Dubai Police Warns Against Viral Energy Drink Videos Targeting Children on Social Media

    Agentic AI Deployment

    NCSC Calls for Tight Security and Human Oversight as Agentic AI Use Expands

    Shadow AI Is Growing in Silence

    Shadow AI Is Growing in Silence While Enterprise Security Falls Behind

    • Regulations
    • Compliance
    • Governance
    • Policy Updates
  • Knowledge Hub
    • All
    • How to
    • What is
    Google Chrome

    How to Remove Saved Passwords From Google Chrome (And Why You Should)

    DPDP Rules, Cyble, DPDP Act, Cyble Vantage

    How Cyble’s Front-Row Vantage Can Help You in Complying to India’s DPDP Act

    Cybersecurity Countries

    The Top 8 Countries Leading the Cyber Defense Race in 2025

    link building

    The Link Building Secrets Your Competitors Don’t Want You to Know

    Supply Chain Attack

    Supply Chain Resilience and Physical Security: Lessons for 2025

    Healthcare cybersecurity trends of 2024

    Healthcare Cybersecurity: 2024 Was Tough, 2025 May Be Better

    CEO's Guide to Take-Down Services

    Shield Your Organization: CEO’s Perspective on Take-Down Services

    Azure sign-in Microsoft

    Microsoft Announces Mandatory MFA for Azure Sign-ins to Bolster Cloud Defenses

    Signal Proxy, Signal, Signal Ban in Russia, Signal Ban in Venezuela, Bypass Signal Ban, How to Activate Signal Proxy, Signal Proxy Server

    How to Set Up Signal Proxy to Help Bypass Censorship in Russia and Venezuela

  • Features
    • Cyber Warfare
    • Espionage
    • Workforce
      • Learning & Development
  • Business
    • All
    • Appointments
    • Budgets
    • Mergers & Aquisitions
    • Partnerships
    • Press Release
    • Startups
    AI Chip, Chip Security Act

    Congress Wants a GPS Tracker on Every Advanced AI Chip America Exports

    Fraud, Agentic AI, AI-assisted Cyberattacks

    Agentic AI Run Fraud Campaigns Earning 4.5 Times More: Interpol

    Stryker, Stryker Cyberattack, CISA, Handala

    Stryker Says Cyberattack Disrupted Processing, Manufacturing and Shipping

    INC Ransom, Western Critical Infrastructure, Critical infrastructure, Russian GRU, Russian Threat Actor, Sandworm, APT44, Energy Supply Chain, Energy Infrastructure

    INC Ransom’s Franchise Model Is Putting Critical Infrastructure on the Chopping Block

    Terrorist Cyberattacks, UAE Cyber Security Council

    UAE Blocked AI-Powered Terrorist Cyberattacks Targeting Critical Infrastructure

    Eurail Breach, Eurail

    Eurail Breach Escalates as Stolen Passport Data and IBANs Surface on Dark Web for Sale

    Discord teen-by-default settings

    Discord Introduces Stronger Teen Safety Controls Worldwide

    The Cyber Express cybersecurity roundup

    The Cyber Express Weekly Roundup: FortiOS Exploits, Ransomware, Hacktivist Surge, and EU Telecom Rules

    Nicole Ozer appointment

    Nicole Ozer Joins CPPA to Drive Privacy and Digital Security Initiatives

    • Startups
    • Mergers & Aquisitions
    • Partnerships
    • Appointments
    • Budgets
    • Research
      • Whitepapers
      • Sponsored Content
      • Market Reports
    • Interviews
      • Podcast
  • Events
    • Conference
    • Webinar
    • Endorsed Events
  • Advisory Board
No Result
View All Result
The Cyber Express
No Result
View All Result
Home Firewall Daily

‘The Hunt Begins’: Meet Russian Hacker Mikhail Matveev, the Cybercriminal with $10M Bounty

Recognizing the magnitude of Matveev's cybercrimes, the US State Department has offered a reward of up to $10 million for any information that leads to his arrest.

Ashish Khaitan by Ashish Khaitan
July 9, 2025
in Firewall Daily, Hacker News
0
Russian Hacker Mikhail Matveev
696
SHARES
3.9k
VIEWS
Share on LinkedInShare on Twitter

In the shadowy realm of cyberspace, where anonymity reigns supreme, the notorious Russian hacker Mikhail Matveev hides. And the US government is looking for him.

Setting a bounty of $10 million, the United States government has filed a lawsuit against the “nine-fingered hacker”, accusing him of carrying out various cyberattacks on multiple US authorities and citizens.

But who is Mikhail Matveev, and what role has he played in these high-profile cybercrimes?

Matveev, a resident of Russia, has been linked to a series of ransomware attacks targeting law enforcement agencies, government institutions, hospitals, schools, and other vital infrastructure.

The attacks involved infiltrating systems, taking control, and encrypting victims’ data, which would only be released upon paying a ransom amount.

“From his home base in Russia, Matveev allegedly used multiple ransomware variants to attack critical infrastructure around the world, including hospitals, government agencies, and victims in other sectors,” said Assistant Attorney General Kenneth A. Polite, Jr. of the Department of Justice Criminal Division.

report-ad-banner

“These international crimes demand a coordinated response. We will not relent in imposing consequences on the most egregious actors in the cybercrime ecosystem.”

Russian hacker Mikhail Matveev’s hacking spree

Russian hacker Mikhail Matveev
Image credit: FBI

According to the US Justice Department, the attacks conducted by Russian hacker Mikhail Matveev affected thousands of victims, both within the United States and globally. Moreover, the Matveev demanded ransom as high as $400 million  from his victims.

Shockingly, $200 million was reportedly paid to him, highlighting the severity and scale of the attacks. The lawsuits filed against him have garnered significant attention, with one published in New Jersey and the other in Washington, DC.

Recognizing the magnitude of Matveev’s cybercrimes, the US State Department has offered a reward of up to $10 million for any information that leads to his capture. This extraordinary bounty underscores the severity of his offenses and the determination of the US government to bring Matveev to justice.

The indictment against Matveev alleges that he played a leading role in several ransomware gangs, including the Hive, LockBit, and Babuk groups.

Operating under various online aliases such as Wazawaka, m1x, Broriscelcin, and Uhodiransomwar, Matveev is believed to have orchestrated numerous attacks on critical infrastructure, resulting in extensive damages to computer systems and significant financial losses for victims.

Around June 25, 2020, Matveev and his associates from the LockBit group purportedly initiated the use of LockBit ransomware against a law enforcement agency located in Passaic County, New Jersey, said the Department of Justice statement.

Similarly, on or around May 27, 2022, Matveev and his coconspirators from the Hive group allegedly employed Hive against a nonprofit behavioral healthcare organization based in Mercer County, New Jersey.

Additionally, on April 26, 2021, Matveev and his accomplices from the Babuk group purportedly launched Babuk against the Metropolitan Police Department in Washington, D.C, said the statement.

Furthermore, Matveev has been accused of stealing residential addresses belonging to Washington, DC, police officers in 2021. Disturbingly, he also boasted about possessing the real names of numerous police informants, adding to the gravity of his criminal activities.

Why Mikhail Matveev is called the nine-finger hacker? 

Amidst the international attention, Russian Hacker Mikhail Matveev posted a video featuring a Russian man uttering profanity-laden remarks, expressing his indifference towards the situation. The video was a response to a tweet by CNN, asking the hacker to comment on the allegations against him. 

While the FBI has shared multiple pictures of Matveev, the hacker himself has not been very discreet when it comes to his identity.

Earlier last year, cybersecurity researcher Brian Krebs shared videos of Matveev. Interestingly, the cybersecurity expert revealed that the hacker appears to be missing a finger.

Matveev claims to have amputated his finger due to losing a bet. However, doubts have been raised about the integrity of this claim, as his remaining fingers seem oddly crooked.

 

Russian Hacker Mikhail Matveev
Text from the Twitter feed of @briankrebs

The story of Mikhail Matveev has captured global attention, highlighting the significant threats posed by cybercriminals and the need for enhanced cybersecurity measures.

As investigations continue, the international community eagerly awaits the capture and trial of this alleged mastermind behind the ransomware attacks that have wreaked havoc on governments, organizations, and individuals alike.

With a $10 million bounty placed on his head by the US government, the hunt for Matveev intensifies. The impact of his actions and the magnitude of the ransomware attacks underscore the pressing need for enhanced cybersecurity measures to protect against such threats in an increasingly interconnected world.

Share this:

  • Share on LinkedIn (Opens in new window) LinkedIn
  • Share on Reddit (Opens in new window) Reddit
  • Share on X (Opens in new window) X
  • Share on Facebook (Opens in new window) Facebook
  • More
  • Email a link to a friend (Opens in new window) Email
  • Share on WhatsApp (Opens in new window) WhatsApp

Related

Tags: 10 Million BountyFBIRussian Hacker Mikhail MatveevUnited States government
Previous Post

Whitworth University Data Breach Puts Over 65000 Students at Risk

Next Post

IBM Acquires Polar Security Reportedly For $60 Million

Next Post
IBM Acquired Polar Security

IBM Acquires Polar Security Reportedly For $60 Million

Q1 2026 Threat Reports

❮ ❯
Cyble-Vision


Follow Us On Google News

Latest Cyber News

Fraud, Agentic AI, AI-assisted Cyberattacks
Cyber News

Study of AI-Assisted Cyberattacks May Reshape How Security Industry Measures Risk

June 5, 2026
Crypto Scam, Crypto
Cyber News

New Threat Actor Targets Crypto Firms’ Development Infrastructure

June 4, 2026
Pink, Pink Extortion, CL-CRI-1147
Cyber News

Pink Extortion Group Emerges Targeting Microsoft 365 Data

June 4, 2026
AI-Powered Bots
Cyber Essentials

AI-Powered Bots Are Blurring the Line Between Users and Cyber Threats

June 4, 2026

Categories

Web Stories

Do This on Telegram, Your Bank Account Will Become Zero
Do This on Telegram, Your Bank Account Will Become Zero
If You Install the iOS 18 Beta, Your iPhone Could Be Hacked
If You Install the iOS 18 Beta, Your iPhone Could Be Hacked
Cricket World Cup Ticketing Systems Under Cybersecurity
Cricket World Cup Ticketing Systems Under Cybersecurity
Cyber Threats and Online Ticket Scams During the NBA Finals
Cyber Threats and Online Ticket Scams During the NBA Finals
Biometric Data Security: Protecting Sensitive Information
Biometric Data Security: Protecting Sensitive Information

About

The Cyber Express

#1 Trending Cybersecurity News and Magazine

The Cyber Express is a handbook for all stakeholders of the internet that provides information security professionals with the latest news, updates and knowledge they need to combat cyber threats.

 

Contact

For editorial queries: [email protected]

For marketing and Sales: [email protected]

 

Quick Links

  • About Us
  • Contact Us
  • Editorial Calendar
  • Careers
  • The Cyber Express by Cyble Vulnerability Disclosure Policy
  • Cyble Trust Portal

Our Address

We’re remote friendly, with office locations around the world:

San Francisco, Atlanta, Rome,
Dubai, Mumbai, Bangalore, Hyderabad,  Singapore, Jakarta, Sydney, and Melbourne

 

Headquarters:

The Cyber Express LLC
10080 North Wolfe Road, Suite SW3-200, Cupertino, CA, US 95014

 

India Office:

Cyber Express Media Network
HD-021, 4th Floor, C Wing, Building No.4. Nesco IT Park, WE Highway, Goregaon East, Mumbai, Maharashtra, India – 4000063

  • Privacy Statement
  • Terms of Use
  • Write For Us

© 2026 The Cyber Express - Cybersecurity News and Magazine.

Welcome Back!

Login to your account below

Forgotten Password?

Retrieve your password

Please enter your username or email address to reset your password.

Log In

Add New Playlist

No Result
View All Result
  • Magazine
  • Firewall Daily
  • Essentials
    • Regulations
    • Compliance
    • Governance
    • Policy Updates
  • Knowledge Hub
  • Features
    • Cyber Warfare
    • Espionage
    • Workforce
      • Learning & Development
  • Business
    • Startups
    • Mergers & Aquisitions
    • Partnerships
    • Appointments
    • Budgets
    • Research
      • Whitepapers
      • Sponsored Content
      • Market Reports
    • Interviews
      • Podcast
  • Events
    • Conference
    • Webinar
    • Endorsed Events
  • Advisory Board

© 2026 The Cyber Express - Cybersecurity News and Magazine.

Are you sure want to unlock this post?
Unlock left : 0
Are you sure want to cancel subscription?
-
00:00
00:00

Queue

Update Required Flash plugin
-
00:00
00:00
Do This on Telegram, Your Bank Account Will Become Zero If You Install the iOS 18 Beta, Your iPhone Could Be Hacked Cricket World Cup Ticketing Systems Under Cybersecurity Cyber Threats and Online Ticket Scams During the NBA Finals Biometric Data Security: Protecting Sensitive Information