The LockBit gang’s ringleader resurfaces with brand-new facilities and brand-new victims, declaring to have actually brushed off an international cops sting
By
-
Alex Scroxton, Security Editor
Released: 26 Feb 2024 17:30
A week after being knocked offline in a combined international police operation led by the UK’s National Crime Agency, the primary operator, or somebody declaring to be the primary operator, of LockBit has actually reemerged, teasing police and establishing fresh facilities and a brand-new leakage website that currently includes information of 5 declared victims.
LockBit was laid low on 19 February in Operation Cronos, a sting that targeted the respected gang’s server facilities, took control of information consisting of source code, decryption tools and victim information, took and froze crypto possessions, and led to 2 arrests in Poland and Ukraine.
In a prolonged message, signed off as LockBit, the gang’s expected ringleader declined the bulk of the claims made by the firms that got involved in Operation Cronos, although they validated that the NCA and its partners– which they refer to throughout as the FBI– accessed their server facilities by means of an unpatched PHP vulnerability.
LockBit declared that they began to observe issues early in the early morning of 19 February, however that after rebooting PHP things returned to regular. “I didn’t pay much attention to it, due to the fact that for 5 years [sic] of swimming in cash I ended up being really lazy,” they composed.
LockBit went on to tease the cops, recommending that the NCA and FBI hackers who targeted it may make more cash operating in the world of ransomware, and countered a number of the claims made in the wake of the takedown, consisting of contesting the identities of a few of those detained, who in LockBit’s variation of the story were little bit more than low-level cash launderers.
They likewise turned down outright the scale of the breach they suffered, declaring that the authorities are not really in ownership of the complete codebase of its locker, to name a few things.
The message even more hypothesizes that the takedown was triggered by a current LockBit attack on the IT systems of Fulton County in Georgia– Atlanta– from which it took info on legal cases versus previous president Donald Trump that LockBit thinks might toss the outcome of the 2024 United States governmental election.
LockBit included: “Personally, I will choose Trump.” Offered they are practically definitely not a United States person, this would appear not likely.
“All FBI actions are targeted at ruining the track record of my affiliate program, my demoralisation, they desire me to leave and stop my task, they wish to frighten me since they can not discover and remove me, I can not be stopped,” they stated.
“I am extremely happy that the FBI has actually cheered me up, energised me and made me avoid home entertainment and investing cash.”
Undependable storyteller
It is necessary to keep in mind that as a cyber criminal ransomware operator,
