Website has been seized and replaced with law enforcement logos from eleven nations
At the time of writing, the group's .onion site loads the message"The site is now under the control of law enforcement" – specifically the UK's National Crime Agency .
"We can confirm that LockBit's services have been disrupted as a result of International Law Enforcement action – this is an ongoing and developing operation," the page states, promising that more information will be revealed at 11:30 GMT on Tuesday February 20.The page states that the NCA worked with the FBI, and an"international law enforcement task force" named Operation Cronos.
The page also carries logos for Europol, and law enforcement agencies from Australia, Germany, the Netherlands, Japan, France, and Switzerland. National flags of those nations, plus those of Canada, Sweden, and Finland, are also present.at least 1,700 LockBit attacks in that nation alone as of mid-2023, and suggest the group was responsible for almost a quarter of all ransomware attacks in some countries.
LockBit was one of the pioneers of ransomware-as-a-service. It offered its wares to affiliates, who got the job of negotiating with victims and then sending the gang part of the loot. That business model's efficiency waned in late 2023, leading LockBit toFew will mourn LockBit's passing – it is believed to have taken tens of millions of dollars in ransom payments, and then threatened to reveal victims' data unless they send further funds.
There are geopolitical implications as well, given LockBit is thought to be directed from Moscow and therefore perhaps part of a wider campaign to disrupt Russia's enemies. ®Safeguarding cyber-physical systems for a smart futureJet engine dealer to major airlines discloses 'unauthorized activity'EquiLend back in the saddle as ransom payment rumors swirl