LockBitSupp, the leader of the Russian-speaking ransomware gang LockBit, published a message on February 26, 2025, on the group’s dark web platform, addressing the new FBI director, Kash Pastel. Appointed by President Donald Trump, Pastel has notably gained attention for his defense of the Capitol rioters and his past support for the far-right QAnon conspiracy theorists.

According to U.S. intelligence, LockBitSupp is believed to be a Russian citizen, Dmitry Khoroshev, still residing in Russia. In his public message, the cybercriminal ironically portrays himself as an American defending his country’s values and national security. He claims that the purpose of his business, “for which he has paid so many taxes,” has always been to make the United States “a safe place.”

LockBitSupp offers to provide Kash Pastel with a “highly sensitive archive of classified information.” He invites the FBI director to contact him, stating that this information “could not only damage the FBI’s reputation but destroy it as an institution.”

A master of bluster, known for mocking other cybercriminals, LockBitSupp mimics the rhetoric of Donald Trump and his supporters. This parody likely mocks the perceived closeness between the U.S. president and his Russian counterpart, Vladimir Putin. It also ironically references rumors accusing LockBitSupp of having cooperated with the FBI.

LockBit was the world’s most significant ransomware gang between 2022 and 2023. Hit by an international law enforcement operation in early 2024, the cybercriminal group has seen its activity decline sharply.

Stay tuned in real time
Subscribe to
the newsletter
By providing your email address you agree to receive the Incyber newsletter and you have read our privacy policy. You can unsubscribe at any time by clicking on the unsubscribe link in all our emails.
Stay tuned in real time
Subscribe to
the newsletter
By providing your email address you agree to receive the Incyber newsletter and you have read our privacy policy. You can unsubscribe at any time by clicking on the unsubscribe link in all our emails.