Russia’s LockBit disrupted but not dead, hacking experts warn

A TV screen shows the front page of LockBit's dark-web leak site that was replaced with the words ‘this site is now under control of law enforcement’, alongside the flags of the UK, the US and several other nations during the law enforcement press conference to outline the details of a law enforcement operation against the ransomware syndicate LockBit in London, on Feb 20, 2024. — AP

Two arrests. Twenty-eight servers seized. And 1,000 decryption keys obtained that can help hacking victims worldwide get their data back.

The takedown announced Feb 20 of the Russia-linked hacking gang LockBit, which by some estimates has been responsible for a quarter of all ransomware attacks, represents what law enforcement agencies in the UK, US and Europe described as one of the heaviest blows they’ve ever dealt against criminal hackers.