FBI urges LockBit ransomware victims to reach out after securing thousands of decryption keys

ID theft
Image credit: Pixabay (Image credit: Future)

The FBI revealed it has thousands of decryption keys that can unlock data encrypted by the LockBit ransomware

The agency’s Assistant Director for the Cyber Division, Bryan Vorndran, confirmed the news during the 2024 Boston Conference on Cyber Security, and has invited all past LockBit victims to reach out and try to unlock their files.

"From our ongoing disruption of LockBit, we now have over 7,000 decryption keys and can help victims reclaim their data and get back online," the FBI Cyber Lead said in a keynote, BleepingComputer reports. "We are reaching out to known LockBit victims and encouraging anyone who suspects they were a victim to visit our Internet Crime Complaint Center at ic3.gov."

Exposed credentials

LockBit is one of the world’s largest and most menacing ransomware variants out there, operating under the Ransomware-as-a-Service (RaaS) model. In February this year, the FBI and its international partners mounted Operation Cronos, which disrupted LockBit’s infrastructure and even temporarily shut it down.

The FBI seized 34 servers and gained access to the group’s data leak site. It claimed to have found sensitive information on almost 200 of LockBit’s affiliates and urged them to come forward before they go after them.

However, since the operation did not result in any arrests, LockBit was propped back up in mere weeks. Soon after, the Canadian pharmacy chain London Drugs fell victim. 

Operation Cronos may not have resulted in arrests, but cybercriminals associated with LockBit have been arrested in the past. Mikhail Vasiliev was arrested in November 2022, Mikhail Pavlovich Matveev (aka Wazawaka) in May 2023, Ruslan Magomedovich Astamirov in June 2023, and Artur Sungatov and Ivan Gennadievich Kondratiev (aka Bassterlord) in February 2024.

The US Government is offering a $10 million reward for anyone who comes forward with information that results in the arrest of LockBit’s operators.

More from TechRadar Pro

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

Read more
Ransomware
8base ransomware site taken down in global police operation
Lock on Laptop Screen
Clop ransomware lists Cleo cyberattack victims
Computer Hacked, System Error, Virus, Cyber attack, Malware Concept. Danger Symbol
Interlock ransomware attacks highlight need for greater security standards on critical infrastructure
Representational image of a cybercriminal
US, UK crack down on Russian bulletproof hosting service ZServers for LockBit partnership
Lock on Laptop Screen
NotLockBit ransomware targets Apple users with advanced file-locking and data exfiltration
Cl0p ransomware group says it was behind Cleo attacks
Latest in Security
China
Chinese hackers who targeted key US infrastructure charged by Justice Department
An American flag flying outside the US Capitol building against a blue sky
Mass federal layoffs will have “devastating impact on cybersecurity, former NSA cybersecurity director warns
A hand reaching out to touch a futuristic rendering of an AI processor.
North Korean fake job hackers are going the extra mile to make sure their scams seem legit
A hand reaching out to touch a futuristic rendering of an AI processor.
Google Cloud unveils new AI Protection security tools, no matter which model you use
A TV remote pointing at YouTube logo
YouTube warns of phishing video using its CEO as bait
China
Microsoft says Chinese Silk Typhoon hackers are targeting cloud and IT apps to steal business data
Latest in News
Stock photographs of people smiling and looking at laptops in a small business environment.
This web hosting platform elevates your online presence
The Samsung Galaxy S25 Edge on display at Galaxy Unpacked
Exclusive: the Samsung Galaxy S25 Edge will have durability to match its ‘sexy’ form
Metaphor: ReFantazio
Sega was Metacritic's highest-rated publisher of 2024 thanks to the critically acclaimed Metaphor: ReFantazio and Like a Dragon: Infinite Wealth
AirPods Pro Review
Apple has quietly updated its guidance on how to clean your AirPods, and suggests you buy a kit… from Belkin
China
Chinese hackers who targeted key US infrastructure charged by Justice Department
A screen shot of Lady Gaga in her interview with Zane Lowe for Apple Music
Lady Gaga’s Spotify press conference is being live streamed today – here’s where you can watch Spotify’s big step forward in fan inclusion