Police Arrest Four Suspects Linked To LockBit Ransomware Gang

Law enforcement agencies from 12 countries collaborated to arrest four individuals linked to the LockBit ransomware gang. The arrested individuals include a suspected LockBit ransomware developer and a bulletproof hosting administrator. The operation also resulted in the seizure of LockBit infrastructure. A suspected LockBit developer was arrested in August 2024 at the request of French authorities while on holiday outside of Russia. The UK's National Crime Agency arrested two more individuals linked to LockBit activity in the same month. One of the arrested individuals is believed to be associated with a LockBit affiliate, while the second was apprehended on suspicion of money laundering. Spain's Guardia Civil arrested the administrator of a bulletproof hosting service used to shield LockBit's infrastructure at Madrid airport. Sanctions were also imposed on several individuals linked to LockBit and Evil Corp, including a prolific LockBit ransomware affiliate. The UK sanctioned 15 Russian nationals involved in Evil Corp's activities, while the US and Australia also imposed sanctions on several individuals. The actions follow a massive disruption of LockBit infrastructure in February 2024 and a series of sanctions and operational actions against LockBit administrators in May and subsequent months.