Global Sting Leads to Indictment of LockBit Ransomware Operators
In a major international law enforcement effort, agencies including the FBI and the UK's National Crime Agency have disrupted the operations of the LockBit ransomware group. This group, which has targeted over 2,000 systems globally, including hospitals and other vital sectors, has been one of the most active and notorious cybercrime networks worldwide. The operation, known as "Operation Cronos," led to the seizure of LockBit's infrastructure, source code, and the capture of decryption keys, which could aid hundreds of victims in recovering access to their encrypted data.
The United States Department of Justice has unsealed indictments charging two Russian nationals, identified as Artur Sungatov and Ivan Kondratyev, with deploying the LockBit ransomware. The accused allegedly conducted ransomware attacks against companies in multiple U.S. states and Puerto Rico. As part of the operation, arrests have been made in Poland and Ukraine, and over 200 cryptocurrency accounts associated with the group have been frozen.
The coordinated action involved the takedown of 34 computer servers across several countries, including the Netherlands, Germany, Finland, France, Switzerland, Australia, the United States, and the UK, among others. The crackdown on LockBit comes after the group claimed responsibility for an attack on Fulton County, Georgia, that disrupted many systems and services. The operation against LockBit represents a significant effort by international law enforcement to combat cyberattacks that pose serious financial and societal risks.
