LockBit leaks expose nearly 200 affiliates and bespoke data-stealing malware

The National Crime Agency (with international partners) seized LockBit's infrastructure and published data from the affiliate portal showing 187 registered affiliates (Jan 2022–Feb 2024); the release includes analysis of StealBit, the group's password-protected data-exfiltration tool used by affiliates to steal files prior to ransomware deployment, and states that StealBit proxy servers and associated infrastructure have been located and destroyed while investigations continue to attribute affiliates.