FBI obtains 7,000 LockBit ransomware decryption keys | StateScoop<\/title> <meta name=\"description\" content=\"The FBI is encouraging victims of the prolific LockBit ransomware strain to claim one of the agency's recently acquired decryption keys.\"> <link rel=\"canonical\" href=\"https:\/\/statescoop.com\/fbi-obtains-7000-lockbit-ransomware-decryption-keys\/\"> <meta property=\"og:locale\" content=\"en_US\"> <meta property=\"og:type\" content=\"article\"> <meta property=\"og:title\" content=\"FBI obtains 7,000 LockBit ransomware decryption keys | StateScoop\"> <meta property=\"og:description\" content=\"The FBI is encouraging victims of the prolific LockBit ransomware strain to claim one of the agency's recently acquired decryption keys.\"> <meta property=\"og:url\" content=\"https:\/\/statescoop.com\/fbi-obtains-7000-lockbit-ransomware-decryption-keys\/\"> <meta property=\"og:site_name\" content=\"StateScoop\"> <meta property=\"article:published_time\" content=\"2024-06-06T19:06:52+00:00\"> <meta property=\"article:modified_time\" content=\"2024-06-06T19:07:42+00:00\"> <meta property=\"og:image\" content=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/06\/fbi-obtains-7000-lockbit-ransomware-decryption-keys-2.jpg\"> <meta property=\"og:image:width\" content=\"2140\"> <meta property=\"og:image:height\" content=\"1401\"> <meta property=\"og:image:type\" content=\"image\/jpeg\"> <meta name=\"author\" content=\"sfoxsowell\"> <meta name=\"twitter:card\" content=\"summary_large_image\">  <link rel=\"dns-prefetch\" href=\"\/\/securepubads.g.doubleclick.net\">\n<link rel=\"dns-prefetch\" href=\"\/\/use.typekit.net\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"StateScoop \u00bb Feed\" href=\"https:\/\/statescoop.com\/feed\/\">\n<link rel=\"alternate\" type=\"application\/rss+xml\" title=\"StateScoop \u00bb Comments Feed\" href=\"https:\/\/statescoop.com\/comments\/feed\/\"> <link rel=\"stylesheet\" id=\"all-css-2\" href=\"https:\/\/statescoop.com\/wp-includes\/css\/dist\/block-library\/style.min.css?m=1717605114g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-6\" href=\"https:\/\/statescoop.com\/wp-content\/mu-plugins\/search\/elasticpress\/dist\/css\/related-posts-block-styles.min.css?m=1717522010g\" type=\"text\/css\" media=\"all\"> <link rel=\"stylesheet\" id=\"all-css-8\" href=\"https:\/\/statescoop.com\/wp-content\/themes\/scoopnewsgroup\/dist\/css\/frontend.css?m=1716385020g\" type=\"text\/css\" media=\"all\">\n<link rel=\"stylesheet\" id=\"typekit-css\" href=\"https:\/\/use.typekit.net\/itk2qbh.css?ver=74528d75ce0daeb8628a\" media=\"all\"> <link rel=\"https:\/\/api.w.org\/\" href=\"https:\/\/statescoop.com\/wp-json\/\"><link rel=\"alternate\" type=\"application\/json\" href=\"https:\/\/statescoop.com\/wp-json\/wp\/v2\/posts\/65007\"><link rel=\"EditURI\" type=\"application\/rsd+xml\" title=\"RSD\" href=\"https:\/\/statescoop.com\/xmlrpc.php?rsd\">\n<meta name=\"generator\" content=\"WordPress 6.5.4\">\n<link rel=\"shortlink\" href=\"https:\/\/statescoop.com\/?p=65007\">\n<link rel=\"alternate\" type=\"application\/json+oembed\" href=\"https:\/\/statescoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fstatescoop.com%2Ffbi-obtains-7000-lockbit-ransomware-decryption-keys%2F\">\n<link rel=\"alternate\" type=\"text\/xml+oembed\" href=\"https:\/\/statescoop.com\/wp-json\/oembed\/1.0\/embed?url=https%3A%2F%2Fstatescoop.com%2Ffbi-obtains-7000-lockbit-ransomware-decryption-keys%2F&format=xml\">   <link rel=\"icon\" href=\"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2023\/01\/cropped-ss_favicon.png?w=32\" sizes=\"32x32\">\n<link rel=\"icon\" href=\"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2023\/01\/cropped-ss_favicon.png?w=192\" sizes=\"192x192\">\n<link rel=\"apple-touch-icon\" href=\"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2023\/01\/cropped-ss_favicon.png?w=180\">\n<meta name=\"msapplication-TileImage\" content=\"https:\/\/statescoop.com\/wp-content\/uploads\/sites\/6\/2023\/01\/cropped-ss_favicon.png?w=270\"> <\/head><body class=\"post-template-default single single-post postid-65007 single-format-standard\" id=\"readabilityBody\"> <a href=\"https:\/\/statescoop.com\/fbi-obtains-7000-lockbit-ransomware-decryption-keys\/#main\" class=\"skip-to-content-link visually-hidden-focusable\">Skip to main content<\/a> <\/p>\n<div class=\"ad ad--top ad--top-desktop\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p> <main id=\"main\" role=\"main\" tabindex=\"-1\"> <\/p>\n<div class=\"ad ad--top ad--top-mobile\">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<section id=\"stickybar\" class=\"stickybar stickybar--newsletter js-stickybar\" readability=\"0.82\"> <button class=\"stickybar__close js-stickybar-close\" aria-controls=\"stickybar\"> <svg class=\"icon icon--close\" width=\"21\" height=\"22\" viewBox=\"0 0 21 22\" fill=\"none\"><path d=\"m.822.518-.805.805L9.695 11 .017 20.678l.805.805 9.678-9.678 9.677 9.678.806-.805L11.305 11l9.678-9.677-.806-.805-9.677 9.677L.822.518Z\" fill=\"currentColor\" \/><\/svg> <span class=\"visually-hidden\">Close<\/span> <\/button> <\/section>\n<article class=\"single-article content\">\n<div class=\"single-article__container js-single-article-content\">\n<header class=\"single-article__header \" readability=\"23.345238095238\">\n<div class=\"single-article__header-content\" readability=\"28.822784810127\">\n<ul class=\"single-article__eyebrow\">\n<li class=\"single-article__category\"> <a class=\"single-article__category-link\" href=\"https:\/\/statescoop.com\/news\/cybersecurity\/\"> <span>Cybersecurity<\/span> <\/a> <\/li>\n<\/ul>\n<p> The FBI is encouraging victims of the prolific LockBit ransomware strain to claim one of the agency’s recently acquired decryption keys. <\/p>\n<\/p><\/div>\n<div class=\"single-article__cover-wrap\">\n<figure class=\"single-article__cover\"> <img data-recalc-dims=\"1\" fetchpriority=\"high\" width=\"640\" height=\"419\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/06\/fbi-obtains-7000-lockbit-ransomware-decryption-keys.jpg?resize=640%2C419&ssl=1\" class=\"single-article__cover-image wp-post-image\" alt=\"gloved hand holding key\" decoding=\"async\" fetchpriority=\"high\" srcset=\"https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/06\/fbi-obtains-7000-lockbit-ransomware-decryption-keys-2.jpg 2140w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/06\/fbi-obtains-7000-lockbit-ransomware-decryption-keys-2.jpg?resize=300,196 300w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/06\/fbi-obtains-7000-lockbit-ransomware-decryption-keys-2.jpg?resize=768,503 768w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/06\/fbi-obtains-7000-lockbit-ransomware-decryption-keys-2.jpg?resize=1024,670 1024w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/06\/fbi-obtains-7000-lockbit-ransomware-decryption-keys-2.jpg?resize=1536,1006 1536w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/06\/fbi-obtains-7000-lockbit-ransomware-decryption-keys-2.jpg?resize=2048,1341 2048w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/06\/fbi-obtains-7000-lockbit-ransomware-decryption-keys-2.jpg?resize=600,393 600w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/06\/fbi-obtains-7000-lockbit-ransomware-decryption-keys-2.jpg?resize=257,168 257w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/06\/fbi-obtains-7000-lockbit-ransomware-decryption-keys-2.jpg?resize=515,337 515w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/06\/fbi-obtains-7000-lockbit-ransomware-decryption-keys-2.jpg?resize=1031,675 1031w, https:\/\/ddi.mohflo.net\/wp-content\/uploads\/2024\/06\/fbi-obtains-7000-lockbit-ransomware-decryption-keys-2.jpg?resize=1288,843 1288w\" sizes=\"(max-width: 1031px) 100vw, 1031px\"><figcaption> (Getty Images) <\/figcaption><\/figure>\n<\/p><\/div>\n<\/header>\n<div class=\"single-article__content\">\n<div class=\"single-article__content-inner has-drop-cap\"> <html readability=\"30.365045806906\"><body readability=\"61.32067328442\"><\/p>\n<p>Victims of ransomware attacks by the Russian ransomware group LockBit can now unlock their encrypted data for free using the 7,000 decryption keys obtained by the FBI, a federal official announced during an event in Boston on Wednesday.<\/p>\n<p>The announcement comes after law enforcement took down the group\u2019s infrastructure in February through \u201cOperation Cronos,\u201d an international operation designed to disrupt LockBit\u2019s business model and expose members of the ransomware gang, FBI Cyber Division Assistant Director Bryan Vorndran said in <a href=\"https:\/\/www.fbi.gov\/news\/speeches\/fbi-cyber-assistant-director-bryan-vorndran-s-remarks-at-the-2024-boston-conference-on-cyber-security\">a keynote<\/a> Wednesday at the 2024 Boston Conference on Cyber Security.<\/p>\n<p>Though the gang still operates, <a href=\"https:\/\/www.weforum.org\/agenda\/2024\/02\/lockbit-ransomware-operation-cronos-cybercrime\/\">reports show<\/a> the mission disrupted its activities.<\/p>\n<p>\u201cFrom our ongoing disruption of LockBit, we now have over 7,000 decryption keys and can help victims reclaim their data and get back online,\u201d Vorndran said.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>As part of its criminal activity, LockBit operates a ransomware-as-a-service business that allows less technical users to purchase ready-made ransomware toolkits to launch their own cyberattacks. LockBit creates malware and licenses the code in exchange for a percentage of the ransoms paid.<\/p>\n<p>According to the Cybersecurity and Infrastructure Security Agency, LockBit was the most deployed ransomware variant across the world in 2022. <\/p>\n<p>\u201cSince January 2020, affiliates using LockBit have attacked organizations of varying sizes across an array of critical infrastructure sectors, including financial services, food and agriculture, education, energy, government and emergency services, healthcare, manufacturing, and transportation,\u201d read a 2023 CISA <a href=\"https:\/\/www.cisa.gov\/sites\/default\/files\/2023-06\/aa23-165a_understanding_TA_LockBit_0.pdf\">advisory<\/a>.<\/p>\n<p>The group is also known for its double extortion tactic, in which it threatens to publish stolen data if its demands aren\u2019t met. That strategy, which has become commonplace in recent years, was used in LockBit\u2019s attack on <a href=\"http:\/\/The%20international%20hacking%20group%20Lockbit%203.0%20claimed%20responsibility%20for%20the%20Jan.%2029%20ransomware%20attack%20and%20threatened%20to%20release%20sensitive%20information.\">Fulton County, Georgia,<\/a> in January, after the city repeatedly refused to pay the group\u2019s ransom.<\/p>\n<p>LockBit <a href=\"https:\/\/statescoop.com\/fulton-county-georgia-refuses-ransomware-lockbit\/\">posted samples<\/a> of sensitive data obtained from Fulton County on its victim-shaming blog in an effort to force payment, but the post was later removed without explanation.<\/p>\n<div class=\"ad ad--inline_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<p>Vordran said the FBI is also reaching out to known LockBit victims and encouraging anyone who suspects they were a victim to visit the <a href=\"https:\/\/ic3.gov\/\">Internet Crime Complaint Center<\/a>.<\/p>\n<p><\/body> <\/p>\n<footer class=\"single-article__footer\" readability=\"3.6307692307692\">\n<div class=\"author-card\" readability=\"13\">\n<div class=\"author-card__avatar\">\n<figure class=\"author-card__image-wrap\"> <img data-recalc-dims=\"1\" decoding=\"async\" class=\"author-card__image\" src=\"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/06\/fbi-obtains-7000-lockbit-ransomware-decryption-keys-1.jpg?w=640&ssl=1\" alt=\"Sophia Fox-Sowell\"> <\/figure>\n<\/p><\/div>\n<p><h4 class=\"author-card__name\">Written by Sophia Fox-Sowell<\/h4>\n<p> Sophia Fox-Sowell reports on artificial intelligence, cybersecurity and government regulation for StateScoop. She was previously a multimedia producer for CNET, where her coverage focused on private sector innovation in food production, climate change and space through podcasts and video content. She earned her bachelor\u2019s in anthropology at Wagner College and master\u2019s in media innovation from Northeastern University. <\/p>\n<\/p><\/div>\n<div class=\"single-article__tags-container\">\n<h4 class=\"single-article__tags-title\">In This Story<\/h4>\n<\/p><\/div>\n<\/footer>\n<p> <\/html><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div class=\"single-article__ads js-single-article-sidebar\">\n<div class=\"ad ad--sidebar js-single-article-sidebar-5 ad--rightrail_1 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-4 ad--rightrail_2 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div class=\"ad ad--sidebar js-single-article-sidebar-3 ad--rightrail_3 \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div><\/div>\n<\/article>\n<div class=\"popular-stories popular-stories--single-post\">\n<div class=\"popular-stories__container\">\n<h2 class=\"popular-stories__title\"> More Scoops <\/h2>\n<p>  <\/div>\n<p>\n<\/div>\n<p> <\/p>\n<section class=\"latest-podcasts\">\n<h2 class=\"latest-podcasts__title\"> Latest Podcasts\t<\/h2>\n<\/section>\n<div class=\"top-categories\">\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Modernization<\/h3>\n<\/p><\/div>\n<div class=\"top-categories__container\">\n<h3 class=\"top-categories__category-title\">Cybersecurity<\/h3>\n<\/p><\/div>\n<\/p><\/div>\n<p> <\/main> <\/p>\n<div class=\"ad ad--bottom \">\n<div class=\"ad__inner\"> <span class=\"screen-reader-text\">Advertisement<\/span> <\/div>\n<\/div>\n<div id=\"interstitial\" class=\"welcome__container\"> <button id=\"close-modal-1\" class=\"welcome__clickable_area\"><\/button> <\/p>\n<div class=\"welcome__ad_wrapper\">\n<p> <button id=\"close-modal-3\" class=\"welcome__continue-button\">Continue to StateScoop<\/button> <\/p>\n<\/p><\/div>\n<\/p><\/div>\n<p>   <\/body> <a href=\"https:\/\/statescoop.com\/fbi-obtains-7000-lockbit-ransomware-decryption-keys\/\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>FBI obtains 7,000 LockBit ransomware decryption keys | StateScoop Skip<\/p>\n","protected":false},"author":11,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[282],"tags":[286],"class_list":["post-3931","post","type-post","status-publish","format-standard","hentry","category-cybercrime","tag-cybercrime"],"featured_image_urls":{"full":"","thumbnail":"","medium":"","medium_large":"","large":"","1536x1536":"","2048x2048":"","chromenews-featured":"","chromenews-large":"","chromenews-medium":""},"author_info":{"display_name":"Cyber Scoop","author_link":"https:\/\/ddi.mohflo.net\/index.php\/author\/cyberscoop\/"},"category_info":"<a href=\"https:\/\/ddi.mohflo.net\/index.php\/category\/cybercrime\/\" rel=\"category tag\">cybercrime<\/a>","tag_info":"cybercrime","comment_count":"0","jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/3931","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/comments?post=3931"}],"version-history":[{"count":0,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/3931\/revisions"}],"wp:attachment":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media?parent=3931"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/categories?post=3931"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/tags?post=3931"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}

{"id":3931,"date":"2024-06-06T14:09:16","date_gmt":"2024-06-06T19:09:16","guid":{"rendered":"https:\/\/cyberscoop.com\/?p=80676"},"modified":"2024-06-06T14:09:16","modified_gmt":"2024-06-06T19:09:16","slug":"fbi-obtains-7000-lockbit-ransomware-decryption-keys","status":"publish","type":"post","link":"https:\/\/ddi.mohflo.net\/index.php\/2024\/06\/06\/fbi-obtains-7000-lockbit-ransomware-decryption-keys\/","title":{"rendered":"FBI obtains 7,000 LockBit ransomware decryption keys"},"content":{"rendered":"