Never Miss a Beat: Get a snapshot of the issues affecting the IT industry straight to your inbox.
LockBit's Leak Site Reemerges, a Week After 'Complete Compromise'
Is LockBit dead? Law enforcement and the group itself seem to be telling conflicting stories.
1 Min Read
AXEL JASS VIA ALAMY STOCK
The LockBit ransomware-as-a-service (RaaS) operation has re-launched its leak site, just one week after a coordinated takedown operation from global law enforcement.
On Feb. 19, the "Operation Cronos Taskforce" -- which includes the FBI, Europol, and the UK's National Crime Agency (NCA), among other agencies -- carried out a massive action. According to Britain's National Crime Agency (NCA), the taskforce took down infrastructure spread across three countries, including dozens of servers. It seized code and other valuable intelligence, troves of data stolen from its victims, and more than 1,000 associated decryption keys. It vandalized the group's leak site, and its affiliate portal, froze more than 200 cryptocurrency accounts, arrested a Polish and a Ukrainian national, and indicted two Russian nationals.
A spokesperson for the NCA summed it up on Feb. 26, telling Reuters that the group "remains completely compromised."
The person added, however, that "our work to target and disrupt them continues."
About the Author(s)
You May Also Like
More Insights
Webinars
Editor's Choice
May 2, 2024
While there are plentiful options in cyber resiliency and business continuity tools and platforms, there isn’t one that can knock out everything from sudden cloud outages to prolonged ransomware attacks in a single punch. What can you do to keep the company on its feet no matter what is thrown at it? Find out in this new virtual event.
Reserve Your Seat Now