LockBit Ransomware Group Strikes Back After Law Enforcement Crackdown

Despite international efforts to dismantle the group, LockBit resumes operations with new threats and targets.

The LockBit ransomware group has resumed operations and set new deadlines for releasing stolen data, including documents from Fulton County.
International law enforcement's recent crackdown on LockBit disrupted but did not dismantle the group, leading to the arrest of several members and the seizure of infrastructure.
LockBit claims to possess documents related to Donald Trump's court cases that could impact the upcoming US election, threatening to release them unless ransoms are paid.
The group has moved its data leak site to a new address and vows to continue targeting government entities, despite law enforcement's efforts to compromise their operations.
Authorities continue to gather intelligence and work to disrupt LockBit, but the group's quick recovery and return to activity highlight the challenges of combating ransomware.