logo

FBI: Breaking Affiliate Trust Was Key to LockBit's Takedown

ID: 6cccf75b-2b67-5b1e-8b7f-a012109c1b4e

STIX ID: report--6cccf75b-2b67-5b1e-8b7f-a012109c1b4e

Feed Name: CosmicBytez Labs

Threat Score
78/100

Date Published: 2026-07-27

Date Updated: 2026-07-27

...
...

Operation Cronos was a February 2024 multinational law enforcement operation that dismantled core LockBit infrastructure, seized servers and wallets, obtained and published affiliate identities and admin data, released over 1,000 decryptors to victims, and publicly named leadership; the combined technical and psychological attacks on LockBit’s RaaS affiliate trust network caused a sharp decline in LockBit activity and reshaped the ransomware ecosystem as affiliates migrated to competing platforms.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.