{"id":55374,"date":"2024-02-20T16:25:29","date_gmt":"2024-02-20T16:25:29","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/cops-turn-lockbit-ransomware-gangs-countdown-timers-against-them\/"},"modified":"2024-02-20T16:25:29","modified_gmt":"2024-02-20T16:25:29","slug":"cops-turn-lockbit-ransomware-gangs-countdown-timers-against-them","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/cops-turn-lockbit-ransomware-gangs-countdown-timers-against-them\/","title":{"rendered":"Cops turn LockBit ransomware gang’s countdown timers against them"},"content":{"rendered":"

In seizing and dismantling LockBit’s infrastructure, Western authorities are now making a mockery of the ransomware criminals by promising a long, drawn-out disclosure of its secrets.<\/p>\n

After the infosec world was invigorated by the announcement of LockBit’s site being seized yesterday, the authorities involved in the takedown operation \u2013 dubbed “Operation Cronos” \u2013 have now completely taken over the group’s leak site and turned it into an expos\u00e9 hub.<\/p>\n

The site retains the same general format it did when it displayed all of the group’s victims, but instead of children’s hospitals<\/a>, schools, and charities, each post now leads to new revelations about the case with more to come.<\/p>\n

\"LockBit's<\/a><\/p>\n

LockBit’s leak blog defaced by the NCA after taking control in February 2024<\/p>\n<\/div>\n

The UK’s National Crime Agency (NCA) is the authority that has taken control of LockBit’s site and administration environment, and is the body behind the slow dissemination of information throughout this week.<\/p>\n

In typical LockBit style, its countdown timers have been hijacked to reveal the times at which various pieces of information will be revealed, including what appears to be the identity of LockBit’s leader. Nobody does a middle finger \u2013 digital or analog \u2013 quite like the British.<\/p>\n