# Mikhail Pavlovich Matveev

Also known as: Wazawaka, m1x, Boriselcin, Uhodiransomwar

Charged

Public record reviewed to August 20, 2026

Index entry last updated August 21, 2026

_Alleged_ ransomware affiliate associated with LockBit, Babuk, and Hive.

Every charge in this entry is an allegation. No conviction is recorded.

- US-indicted ransomware affiliate associated with LockBit, Babuk, and Hive.
- Reportedly charged in Russia in late 2024; that report rests substantially on Russian media and is not independently confirmed.

Everything on this page comes from cited public sources.

This entry records 2 actions across 1 takedown, each traced to a cited source. Every linked takedown sits in the verified core of this index. Where the record is silent, this page says so rather than filling the gap.

Legal summary

**Associated takedowns:** [Operation Cronos wave 1](https://takedownindex.org/takedowns/operation-cronos-wave-1)

**Recorded role:** Ransomware affiliate associated with LockBit, Babuk, and Hive

**Group segment:** Affiliate

**Charging authority:** United States Department of Justice

**Charging jurisdiction:** United States

**Case number:** Not published

**Latest recorded action:** Charged, May 2023

**Nationality:** Russia

**Country of residence:** Russia

- [Associated takedowns](https://takedownindex.org/people/mikhail-pavlovich-matveev)
- [Legal history](https://takedownindex.org/people/mikhail-pavlovich-matveev/legal-history)
- [Charges](https://takedownindex.org/people/mikhail-pavlovich-matveev/charges)
- [Sources](https://takedownindex.org/people/mikhail-pavlovich-matveev/sources)

## Charges

Counts named in the public charging documents for this person, with the authority that brought them.

A charge is an accusation. No count on this page has been tested at trial by the fact of appearing here.

4 counts named in the public record

| Charge | Charging authority | Case number | Status |
| --- | --- | --- | --- |
| Conspiracy to transmit ransom demands | United States Department of Justice | Not published | Charged, May 2023 |
| Conspiracy to damage protected computers | United States Department of Justice | Not published | Charged, May 2023 |
| Intentional damage to protected computers | United States Department of Justice | Not published | Charged, May 2023 |
| Creation and use of malicious computer programs, per Russian media reports | Authority not recorded | Not published | Charged |

Counts are listed as they appear in the charging document. Where an authority confirmed a charge but published no docket, the case number reads not published rather than being left blank. This dataset carries no statute citations, so no statute column is shown.