Confiscation of websites and comments from the leader of the LockBitSupp group.
International law enforcement agencies in 11 countries took control of the LockBit group's website during Operation Cronos.
As a result of Operation. onion, the LockBit data leak site is now under the control of the UK's National Crime Agency (NCA). The site now displays a banner about the capture by law enforcement agencies. The police promise to provide more information about the operation.
Europol banner on the LockBit[/CENTER]
VX-underground reports that law enforcement agencies also eliminated the LockBit partner panel. According to a post on the site, LockBit's source code, chats, and victim information have been removed.
Message about capturing the LockBit Partner dashboard
Operation Cronos brought together law enforcement agencies from 11 countries, including Australia, Canada, Sweden, Finland, Germany, the Netherlands, Japan, France, Switzerland, the United Kingdom and the United States, under the auspices of Europol.
Although the LockBit leak site is no longer available and shows a hijacking message or connection error, some of the group's other darknet websites (including sites for posting data and sending gang private messages) are still operational. BleepingComputer also confirmed that buyout negotiation sites are unavailable, but do not display a withdrawal message.
The status of the Tox account of the representative of the "LockBitSupp" group now shows a message stating that the FBI hacked the ransomware servers using a PHP exploit.
"The FBI seized servers via PHP, backup servers without PHP cannot be touched," LockBitSupp said in a statement.
It is worth noting that in March 2023, the LockBit grouping infrastructure went offline, causing a stir in the community. Some industry experts have linked the outage to a takeover of the FBI group's servers, as was the case with the Hive group in January.
International law enforcement agencies in 11 countries took control of the LockBit group's website during Operation Cronos.
As a result of Operation. onion, the LockBit data leak site is now under the control of the UK's National Crime Agency (NCA). The site now displays a banner about the capture by law enforcement agencies. The police promise to provide more information about the operation.
Europol banner on the LockBit[/CENTER]
VX-underground reports that law enforcement agencies also eliminated the LockBit partner panel. According to a post on the site, LockBit's source code, chats, and victim information have been removed.
Message about capturing the LockBit Partner dashboard
Operation Cronos brought together law enforcement agencies from 11 countries, including Australia, Canada, Sweden, Finland, Germany, the Netherlands, Japan, France, Switzerland, the United Kingdom and the United States, under the auspices of Europol.
Although the LockBit leak site is no longer available and shows a hijacking message or connection error, some of the group's other darknet websites (including sites for posting data and sending gang private messages) are still operational. BleepingComputer also confirmed that buyout negotiation sites are unavailable, but do not display a withdrawal message.
The status of the Tox account of the representative of the "LockBitSupp" group now shows a message stating that the FBI hacked the ransomware servers using a PHP exploit.
"The FBI seized servers via PHP, backup servers without PHP cannot be touched," LockBitSupp said in a statement.
It is worth noting that in March 2023, the LockBit grouping infrastructure went offline, causing a stir in the community. Some industry experts have linked the outage to a takeover of the FBI group's servers, as was the case with the Hive group in January.