logo

Operation Cronos and the LockBit takedown: What we know

ID: edcd4330-8f28-5c46-97da-ce96670c27da

STIX ID: report--edcd4330-8f28-5c46-97da-ce96670c27da

Feed Name: ReversingLabs Blog

Threat Score
75/100

Date Published: 2024-02-22

Date Updated: 2026-04-29

Author: [email protected] (Carolynn van Arsdale)

...
...

Operation Cronos, led by the UK National Crime Agency with international partners, successfully compromised the LockBit ransomware group's administration environment, seized source code and decryption keys, took over the group's leak site, enabled arrests and freezing of cryptocurrency accounts, and published resources (including a decryptor). The report reviews LockBit's prolific global activity and financial impact, cautions that similar ransomware offshoots may arise, and recommends defensive measures such as YARA rules and strengthened threat hunting.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.