iscover
Share this article on:
Powered by
MOMENTUM
MEDIA
Global law enforcement has seemingly resurrected the seized dark web leak site of the LockBit ransomware gang once again, teasing new arrests and information.
LockBit was seized as part of Operation Cronos in February this year, an international sting led by the National Crime Agency of the UK alongside law enforcement agencies from the US, Germany, Canada, and Australia.
While LockBit quickly restored its operations, it seems that Operation Cronos has new information to share and has reactivated the seized site.
The @NCA_UK has resurrected #LockBit’s domain. More to come. #ransomware pic.twitter.com/e4tjLpXLco
— Brett Callow (@BrettCallow) September 30, 2024========================
Cyber Daily has observed that LockBit’s seized site now contains new posts, all dated yesterday (30 September 2024), which tease new information about the group.
Like the original takedown, law enforcement is using the group’s own site design language and operation against it and has set countdown times for the release of this information, which includes new arrests.
These include “Arrest of a major LockBit actor”, “LockBit linked UK arrests”, “LockBit infrastructure monitored and disrupted”, the demise of LockBit since February 2024”, and “Member of Evil Corp identified as LockBit affiliate”.
Cyber Daily has observed several LockBit onion addresses that are still accessible and have recent listings.
The latest seized site also has a section saying: “You are using an older version of this site”, and when searching certain onion addresses, the URL changes, and it appears that they redirect users to the seized site.
Discussion of the latest Operation Cronos activity ignited on BreachForums, with one user saying that this is purely the old takedown site reactivated.
“Law enforcement has reactivated a seized LockBit onion site to preview some announcements they will make tomorrow,” the user said.
Operation Cronos has also said it will re-close the LockBit site in a week.
Cyber Daily has reached out to the Australian Federal Police, which is involved in Operation Cronos, for comment on the latest activity.
Be the first to hear the latest developments in the cyber industry.
