Mikhail Pavlovich Matveev
Also known as: Wazawaka, m1x, Boriselcin, Uhodiransomwar
Charged
Public record reviewed to August 20, 2026
Index entry last updated August 21, 2026
Alleged ransomware affiliate associated with LockBit, Babuk, and Hive.
Every charge in this entry is an allegation. No conviction is recorded.
- US-indicted ransomware affiliate associated with LockBit, Babuk, and Hive.
- Reportedly charged in Russia in late 2024; that report rests substantially on Russian media and is not independently confirmed.
Everything on this page comes from cited public sources.
This entry records 2 actions across 1 takedown, each traced to a cited source. Every linked takedown sits in the verified core of this index. Where the record is silent, this page says so rather than filling the gap.
Legal summary
- Associated takedowns
- Operation Cronos wave 1
- Recorded role
- Ransomware affiliate associated with LockBit, Babuk, and Hive
- Group segment
- Affiliate
- Charging authority
- United States Department of Justice
- Charging jurisdiction
- United States
- Case number
- Not published
- Latest recorded action
- Charged, May 2023
- Nationality
- Russia
- Country of residence
- Russia
Charges
Counts named in the public charging documents for this person, with the authority that brought them.
A charge is an accusation. No count on this page has been tested at trial by the fact of appearing here.
4 counts named in the public record
| Charge | Charging authority | Case number | Status |
|---|---|---|---|
| Conspiracy to transmit ransom demands | United States Department of Justice | Not published | Charged, May 2023 |
| Conspiracy to damage protected computers | United States Department of Justice | Not published | Charged, May 2023 |
| Intentional damage to protected computers | United States Department of Justice | Not published | Charged, May 2023 |
| Creation and use of malicious computer programs, per Russian media reports | Authority not recorded | Not published | Charged |
Counts are listed as they appear in the charging document. Where an authority confirmed a charge but published no docket, the case number reads not published rather than being left blank. This dataset carries no statute citations, so no statute column is shown.