Security News > 2024 > May > Lockbit's seized site comes alive to tease new police announcements
The NCA, FBI, and Europol have revived a seized LockBit ransomware data leak site to hint at new information being revealed by law enforcement this Tuesday.
As part of this disruption, the police converted one of the data leak sites into a press release site, where the UK's National Crime Agency, the FBI, and Europol shared information about what they learned during the operation, a list of affiliates, and how LockBit lies to victims by not always deleting stolen data after a ransom is paid.
One of the announcements had the title "Who is LockBitSupp?" hinting that law enforcement would reveal information about who was running the ransomware operation.
Law enforcement eventually shut down the website a few days later, with many seeing the "LockBitSupp" post as a blunder by law enforcement for hyping the announcement and revealing nothing and a win for LockBitSupp, who continued to remain anonymous.
On Sunday, international law enforcement revived LockBit's data leak/press release site, this time with seven new blog posts that are all going live at the same time, on Tuesday at 14:00:00 UTC. These blog posts tease titles like "What have we learnt?," "More LB hackers exposed," "What have we been doing?," and what many hope to be the coup de grâce on the diminished ransomware operation, another blog post titled "Who is LockBitSupp?".
Since the law enforcement operation, LockBit has been struggling to return to prior activity levels, with affiliates having become wary that the operation is now compromised and being watched too closely by law enforcement.