3 hours ago
Image source: Getty Images
An online site run by a major criminal gang that organizes ransomware cyberattacks has apparently been taken over by law enforcement.
The site belongs to the LockBit group.
It sells services that allow people to compromise computer networks and keep their data until a ransom is paid.
On Monday evening, a message appeared on the group's website saying it was “now under the control of law enforcement.”
The message states that “the website is under the control of the United Kingdom's National Crime Agency and works closely with the FBI and the international law enforcement task force 'Operation Cronos'.”
It adds that this is an “ongoing and evolving operation” and adds: “Please return here at 11:30 a.m. GMT on Tuesday 20 February for further information.”
image description,
The message that appears on LockBit's website after being taken over by law enforcement
According to the post on LockBit's website, the operation was carried out by the UK's National Crime Agency, the US Federal Bureau of Investigation, Europol and a coalition of international police agencies.
The UK's National Cyber Security Center (NCSC), along with partner agencies in the US, Australia, Canada, France, Germany and New Zealand, have previously warned of the “ongoing threat” posed by the group.
The statement from last year went on to say that LockBit's eponymous software was the “most deployed ransomware variant worldwide” in 2022 and that it “continues to be productive so far in 2023.”
LockBit has been involved in many high-profile hacker attacks, including the UK's Royal Mail in early 2023. The group and its affiliates make money by stealing sensitive data and threatening to expose it unless their victims pay a ransom.
According to Portal, LockBit was first discovered in 2020 when the software appeared on Russian-language forums, leading some analysts to believe the group was based in Russia.
video caption,
Watch: What is ransomware and how does it work?