FBI strikes down rumored LockBit reboot

Nascent yet prominent group

With activities traceable to August 2023, the group quickly grew fame as a formidable threat agency and made a dark web entry in February 2024, advertising leaked data on recently disrupted BreachForums and other leak sites.

The group, the FBI pointed out, had claimed many victims internationally which included 43 companies from countries including Argentina, Australia, Belgium, Brazil, Honduras, India, Canada, Croatia, Peru, Poland, the UK, the United Arab Emirates, and Germany.

Radar runs a Ransomware-as-a-service model which allows the group to license out its ransomware kit to many affiliates, who then carry out attacks on various targets. The decentralized structure of this model makes it difficult for law enforcement to fully shut down their operations.