Law enforcement release

# MIKHAIL PAVLOVICH MATVEEV

Federal Bureau of Investigation, April 26, 2023. pa\_matveev\_wanted on td\_2024\_cronos\_w1: that Mikhail Pavlovich Matveev is listed on the FBI's Cyber's Most Wanted, posted by the Newark field office and still wanted as of access; that he is a Russian national and alleged prolific ransomware affiliate linked to LockBit, Babuk and Hive and identified as one of the alleged developers/administrators of Babuk; and that federal arrest warrants were issued after he was charged on 6 December 2022 in the District of Columbia and on 8 December 2022 in the District of New Jersey. Aliases on the poster: 'Wazawaka', 'Boriscelcin', 'm1x', 'Uhodiransomwar'; date of birth used 17 August 1992..

**Source type:** Law enforcement release

**Published:** April 26, 2023

**Research grade:** P1

**Used in entries:** 1

## Bibliographic record

**Publisher:** Federal Bureau of Investigation

**Published:** April 26, 2023

**Source type:** Law enforcement release

**Research grade:** Source grade P1

**Language:** English

**Official record:** Official publication

**Address:** [https://www.fbi.gov/wanted/cyber/mikhail-pavlovich-matveev](https://www.fbi.gov/wanted/cyber/mikhail-pavlovich-matveev)

**What it supports:** pa\_matveev\_wanted on td\_2024\_cronos\_w1: that Mikhail Pavlovich Matveev is listed on the FBI's Cyber's Most Wanted, posted by the Newark field office and still wanted as of access; that he is a Russian national and alleged prolific ransomware affiliate linked to LockBit, Babuk and Hive and identified as one of the alleged developers/administrators of Babuk; and that federal arrest warrants were issued after he was charged on 6 December 2022 in the District of Columbia and on 8 December 2022 in the District of New Jersey. Aliases on the poster: 'Wazawaka', 'Boriscelcin', 'm1x', 'Uhodiransomwar'; date of birth used 17 August 1992.

**Dataset id:** src\_fbi\_wanted\_matveev

## Research notes

- published\_on is the poster's own publication timestamp, 2023-04-26T09:32:00, as returned by the FBI wanted API. Last modified 2026-03-15.
- Contradicts part of the citing record: the poster carries no reward text at all. Its reward\_text field is empty, so it does not support the claim that Matveev is the subject of a State Department Transnational Organized Crime Rewards Program reward of up to USD 10 million. That reward, if it stands, needs a State Department or DOJ source instead. By contrast the Bogachev poster in this same batch does carry an explicit $3 million TOC Rewards Program line, so the field is populated when a reward exists.
- www.fbi.gov returns a bot challenge to direct fetching; the poster's fields were read from the FBI's own wanted API at api.fbi.gov/wanted/v1/list.

How this source is used

Cited 1 time across 1 record type.

The role on each citation records what the source was relied on for. A primary source establishes the fact, a supporting source corroborates it, technical evidence describes the infrastructure, and a later outcome records what happened afterwards.

Sources were reviewed to a research cutoff of August 23, 2026. Addresses recorded after that date are not reflected here.

## Cited by

### Legal actions against people

1 citation

Cited for a recorded legal action against a named person.

-
[Mikhail Pavlovich Matveev](https://takedownindex.org/people/mikhail-pavlovich-matveev)

Publicly wanted, Operation Cronos wave 1

Primary source

[All sources](https://takedownindex.org/sources)
