Current:Home > StocksNotorious ransomware provider LockBit taken over by law enforcement-Angel Dreamer Wealth Society D1 Reviews & Insights
Notorious ransomware provider LockBit taken over by law enforcement
View Date:2024-12-23 23:24:20
Washington — A ransomware service provider that has targeted over 2,000 systems across the globe, including hospitals in the U.S., with demands for hundreds of millions of dollars was taken down Monday, and Russian nationals were charged as part of an international plot to deploy the malicious software, the Justice Department announced Tuesday.
Known as LockBit, the network of cybercriminals targets critical components of manufacturing, healthcare and logistics across the globe, offering its services to hackers who deploy its malware into vulnerable systems and hold them hostage until a ransom is paid. The attackers have so far extorted more than $120 million from their victims, officials said, and their program has evolved into one of the most notorious and active.
As part of this week's operation, the FBI and its law enforcement partners in the United Kingdom seized numerous public-facing platforms where cybercriminals could initiate contact with and join LockBit. Investigators also seized two servers in the U.S. that were used to transfer stolen victim data.
The front page of LockBit's site has been replaced with the words "this site is now under control of law enforcement," alongside the flags of the U.K., the U.S. and several other nations, the Associated Press noted.
According to Attorney General Merrick Garland, the U.S. and its allies went "a step further" by obtaining the "keys" that can unlock attacked computer systems to help victims "regain access to their data," releasing them from having to pay a ransom. The move could help hundreds of victims worldwide.
Two Russian nationals who allegedly used LockBit's ransomware against companies across the U.S. — in Oregon, New York, Florida and Puerto Rico — were also indicted in New Jersey as part of the Justice Department's latest play against the group.
Artur Sungatov and Ivan Kondratyev joined a growing number of defendants accused by federal prosecutors of attacking American institutions as part of the LockBit scheme. A total of five have now been charged, including an individual who allegedly targeted Washington, D.C.'s police force.
LockBit was the most commonly used version of ransomware in 2022, according to a joint cybersecurity advisory published by the FBI and the Cybersecurity and Infrastructure Security Agency last year, and targeted an "array of critical infrastructure sectors, including financial services, food and agriculture, education, energy, government and emergency services, healthcare, manufacturing, and transportation."
The LockBit network was first seen on Russian-speaking cybercrime platforms in 2020 and continued to evolve and grow, targeting computer platforms and various operating systems. By 2022, 16% of ransomware attacks in the U.S. were deployed by the LockBit group, according to the advisory.
Criminals conventionally gain access to vulnerable systems through phishing emails or when users visit an infected site while browsing the internet. And U.S. officials consistently warn users to avoid paying ransoms and instead contact law enforcement.
Federal investigators have recently developed a new approach to combat ransomware attacks that can be both costly to victims and damaging to the normal functioning of society: arming victims with the tools necessary to counter a malware attack.
Similar to the LockBit operation, in July 2022, the FBI toppled an international ransomware group called Hive and collected decryption keys for its penetrated computer networks it had breached to conduct what officials called a "21st-century high-tech cyber stakeout." FBI agents then distributed the keys to the victims whose networks were being ransomed.
And in August, investigators took down a criminal network known as the Qakbot botnet — a grouping of computers infected by a malware program that was used to carry out cyberattacks. Law enforcement gained access to the QakBot infrastructure and "redirected" the cyber activity to servers controlled by U.S. investigators, who were then able to inject the malware with a program that released the victim computer from the botnet, freeing it of the malicious host.
Victims of LockBit attacks are encouraged to contact the FBI for further assistance.
- In:
- Cyberattack
- Ransomware
- Malware
Robert Legare is a CBS News multiplatform reporter and producer covering the Justice Department, federal courts and investigations. He was previously an associate producer for the "CBS Evening News with Norah O'Donnell."
veryGood! (61)
Related
- Atlanta man dies in shootout after police chase that also kills police dog
- Sea lion escapes from Central Park Zoo pool amid severe New York City flooding
- Anti-abortion groups are at odds on strategies ahead of Ohio vote. It could be a preview for 2024
- Pope Francis creates 21 new cardinals who will help him to reform the church and cement his legacy
- The Best Corduroy Pants Deals from J.Crew Outlet, Old Navy, Levi’s & More, Starting at $26
- Silas Bolden has 2 TDs to help No. 21 Oregon State beat No. 10 Utah
- Judge says she is ending conservatorship between former NFL player Michael Oher and Memphis couple
- Where are the best places to grab a coffee? Vote for your faves
- 'I heard it and felt it': Chemical facility explosion leaves 11 hospitalized in Louisville
- Which jobs lose pay in a government shutdown? What to know about military, national parks, TSA, more
Ranking
- Colorado police shot, kill mountain lion after animal roamed on school's campus
- Photographs documented US Sen. Dianne Feinstein’s groundbreaking career in politics
- Silas Bolden has 2 TDs to help No. 21 Oregon State beat No. 10 Utah
- Alaska’s popular Fat Bear Week could be postponed if the government shuts down
- Army veteran reunites with his K9 companion, who served with him in Afghanistan
- Supreme Court to consider Texas and Florida laws regulating social media platforms
- How much was Dianne Feinstein worth when she died?
- NYC floods: Photos show torrential rain wreaking havoc on New York City, North Jersey
Recommendation
-
Former West Virginia jail officer pleads guilty to civil rights violation in fatal assault on inmate
-
Burglar recalls Bling Ring's first hit at Paris Hilton's home in exclusive 'Ringleader' clip
-
She's broken so many records, what's one more? How Simone Biles may make history again
-
Atlantic Festival 2023 features Hillary Clinton, Nancy Pelosi, Kerry Washington and more, in partnership with CBS News
-
Tesla Cybertruck modifications upgrade EV to a sci-fi police vehicle
-
Searchers looking for 7 kidnapped youths in Mexico find 6 bodies, 1 wounded survivor
-
Aerosmith postpones farewell tour to next year due to Steven Tyler's fractured larynx
-
Dianne Feinstein's life changed the day Harvey Milk and George Moscone were assassinated — the darkest day of her life