Pirated pirates. The Ransomware Lockbit group was the victim of a hacking which led to the disclosure of nearly 60,000 Bitcoin addresses linked to its infrastructure. This piracy made it possible to highlight illicit transactions of this groupalthough the private keys were not compromised.
The key points of this article:
The Ransomware Lockbit group was hacked, revealing nearly 60,000 Bitcoin addresses linked to its infrastructure, without compromising private keys. This disclosure includes a MySQL database exhibiting illicit transactions and negotiations with victims, offering an opportunity to investigators to go up the track of Lockbit activities.
A MySQL database disclosed with bitcoin addresses
Piracy revealed a MySQL database containing crucial information on the activities of LockBit. This database, publicly shared, could help blockchain analysts to retrace the group's illegal financial flows. It notably contains details on individual ransomware constructions created by Lockbit affiliatesas well as on some of the targeted companies. In addition, the database disclosed includes a table of « chats » Containing more than 4,400 negotiation messages between the victims and the organizers of these ransomware. This information could be precious for The police And investigators specializing in blockchain. Despite the massive disclosure of bitcoin addresses, No private key has not been compromised. An X user shared a conversation with a lockbit operator confirming the violation, but ensuring that Private keys And the sensitive data has not been lost. However, this is crucial, because Private keys allow to hold and transfer funds to cryptocurrencies. Without them, Bitcoin addresses disclosed cannot be used to access funds.
The sprinkling sprinkled or how a group of pirates became hacked! – Source: account x
An opportunity for investigators and the police
The disclosure of these Bitcoin addresses of course offers A unique opportunity For investigators. Each Ransomware victim is generally awarded a specific address to pay for their ransom, allowing affiliates to follow payments while trying to hide links with their main wallets. The exposure of these addresses therefore allows the police and Investigators specializing in blockchain to follow the transactions and potentially linking ransom payments passed to known wallets. This could lead to the identification and arrest of the members of LockBit. Although the private keys have remained secure, this leak could allow the police to go up the track of transactions and potentially put an end to the activities of this ransomware group. In the meantime, the FBI continues the fight and communicates from time to time On small victories against pirates.