11-nation operation takes down world’s ‘most harmful’ cybercriminal group

An international coalition of law enforcement agencies in 11 countries announced Tuesday that it had taken control of computers and software at the heart of the world’s most prolific ransomware group, giving victims hope that they won’t be forced to make ransom payments to recover data stolen from their computer systems.

The infrastructure seized from the LockBit ransomware gang included hundreds of electronic keys needed to recover the stolen data as well as the site on the dark web where LockBit leaked data from victims who refused to pay ransoms in cryptocurrency, officials said.

The law enforcement effort, dubbed Operation Cronos, was led by the United Kingdom’s National Crime Agency and included the FBI and other enforcement agencies. The coalition then used the group’s site to mimic its previous operation and begin leaking information about LockBit, posting a countdown timer for files still to come, including one teasing forthcoming information about the anonymous frontman for the gang.

“It’s a thing of beauty. The NCA and FBI are trolling LockBit aggressively,” said Don Smith, vice president at Secureworks, which had its analysis of the group republished by the authorities on the hackers’ site.

More From The Washington Post (subscription required):