The takedown of LockBit in February is starting to bear fruit for rival gangs with Play overtaking after an eight-month run of LockBit topping the attack charts.
Lockbit 3.0 Ransomware Attack Demo
For the first time since the National Crime Agency-led takedown of LockBit, the gang did not record the most number of attacks in a single month, suggesting law enforcement claims of a successful disruption were valid.
When the person police believe to be LockBit's leader, Dmitry Khoroshev, was revealed two weeks ago, the NCA also updated the world on LockBit's operation, saying it was "running at limited capacity" and that the threat the gang presents to the world was "significantly reduced."
The NCC Group findings, published today, also take into account the understanding that LockBit had rerouted organizations it had attacked before the NCA's disruption operation to maintain appearances.
