May 6, 2024 at 07:52PM
LockBit’s website, shut down in February by law enforcement, has been relaunched, teasing the release of unmasking documents. The site was initially seized in Operation Cronos, and has now resurfaced with countdowns to unveil disclosures. Law enforcement’s previous articles on the site were uneventful, but upcoming reveals may provide substantial information about LockBit.
After reviewing the meeting notes, here are the key takeaways:
– Law enforcement agencies have relaunched LockBit’s website which is now counting down to reveal new documents that could expose the ransomware group.
– The original seizure of LockBit’s website in February as part of Operation Cronos was a major disruption for the ransomware gang. The site was repurposed by law enforcement to provide information about the inner workings of the LockBit crew.
– Charles Carmakal, CTO of Mandiant, has stated that the upcoming reveal on the LockBit website could provide more substantial information about the group, with Mandiant having close ties to federal investigators.
– The LockBit website currently displays eight locked pages with countdowns ending on May 10th, and one of the articles is titled “Who is LockbitSupp?”, potentially indicating a redo of the original article with more information.
– LockBit spokesperson has expressed defiance and denial in response to law enforcement’s actions, claiming they continue their criminal activities despite the disruption caused by Operation Cronos.
– While LockBit has a new website and appears to be continuing criminal activities, Operation Cronos may have weakened the group, with raids allegedly conducted against hospitals, Fulton County in Georgia, and even the FBI.
Overall, the upcoming announcements on the LockBit website are anticipated to provide more substantial information about the cybercriminals behind the extortion crew.