LockBit rises from the ashes, but will it pack the same punch as before?

By Solomon Klappholz for IT PRO
Monday, February 26, 2024

• 897
• More

Ransomware operator LockBit has reemerged on a new dark web leak site just days after a joint law enforcement operation seized control of the group’s infrastructure.

Dr Ilia Kolochenko, CEO and chief architect at ImmuniWeb and adjunct professor of cyber security and cyber law at Capital Technology University agreed, noting groups of LockBit’s size are not easily dismantled by one-off operations.

“The resurrection is not surprising: LockBit is a mature, well-organized and seasoned cybercrime group that cannot be easily dismantled compared to smaller ransomware entities that were elegantly smashed by joint operations of law enforcement agencies in 2023”

But Kolochenko suggested there may still be hope the operation will bear more long lasting fruits in terms of shutting LockBit down for good.

“Nonetheless, according to the information published by media and law enforcement agencies, the latter managed to get a full list of victims, payments and other details of LockBit’s ransomware empire”, Kolochenko noted.

“First, this data can potentially serve as invaluable intelligence for further investigations that may eventually expose the whereabouts and identities of LockBit’s members. Second, it is interesting whether law enforcement agencies will now pass the collected information to other national authorities to eventually probe LockBit’s victims.” Read Full Article