Police arrested suspected LockBit operator as ransomware gang leaks new data • TechCrunch

Double-linked Russian and Canadian citizens LockBit ransomware processHe was accused of involvement in attacks against critical infrastructure and large industrial companies around the globe.

Mikhail Vasiliev (33), was detained in Ontario, Canada, on October 26, after an investigation by Europol’s European Cybercrime Centre and the French National Gendarmerie. FBIRoyal Canadian Mounted Police. Europol stated that police took eight computers, 32 external hard drives and 400,000 euros worth of cryptocurrency during the arrest.

This arrest comes after a similar operation in Ukraine last October, when two of his associates were arrested in a joint international law enforcement operation.

Europol Vasiliev, which has been described as “one of the most prolific ransomware operators in the world,” has been one of its highly valued targets due to its involvement in many high-profile ransomware cases. According to the European Union Police Agency (EUPA), he was known to try and extort victims with ransom demands of between 5 million and 70million euros.

Separately, the Department of Justice released a press release stating that LockBit had at least 1,000 victims in the United States. They also received tens of million dollars in ransom payments from their victims.

Vasiliev is being extradited to the United States where he is charged in connection with conspiring and deliberately damaging computers and sending ransom demands. If convicted, Vasiliev faces a maximum sentence of five years in prison.

Paul Abate, FBI Deputy Director, stated that “Yesterday’s successful arrest shows our ability to continue and enforce continued pressure upon our adversaries.” “The FBI’s ongoing investigations, in close collaboration and with our federal partners, demonstrate our determination to use all of our resources to protect the American public from these global cyber threats.”

Europol didn’t name the victims that LockBit was allegedly targeting. France’s participation in this operation suggests that it could be linked to a recent attack against the French defense and aviation group Thales.

LockBit, a ransomware operation that was previously high-profile and claimed to be secure Attacks on technology manufacturer FoxconnThen there’s the Advanced UK Health Services VendorThen there’s the IT giant AccentureThales was added to its leak site by, on October 31. The group claimed it released data that was stolen from the company today. They described it as “extremely sensitive and high risk”. According to LockBit files that were not made public at publication include customer files, accounting files, business documents and business documents.

“With regard to customers, you can reach out to relevant organizations to consider taking legal action against this company that has largely neglected confidentiality rules,” reads a message on the LockBit leak website.

Cedric Loquin, a spokesperson for Thales, did not immediately reply to our request for comment.

LockBit claims it also leaked 40 Terabytes of stolen data today from German auto giant Continental. Samples of data indicate that the gang obtained technical documents and source codes. Although ransom demands are not mentioned explicitly, the ransomware gang leakpage claims that it can give access to all stolen data for $50,000,000.

TechCrunch was told by Mark Seidler, a Continental spokesperson, that the company’s investigation into this incident revealed that “attackers were also in able to steal some information from affected IT systems.” However, he declined to specify what data was stolen or how many employees were affected. affected.