US Edition60,000 Bitcoin Wallets Leaked As LockBit Ransomware Hackers Get Hacked
- On April 29th, 2025, the LockBit ransomware group experienced a security incident when their affiliate portals on the dark web were vandalized, resulting in the online exposure of a MySQL database dump.
- This breach likely exploited the CVE-2024-4577 vulnerability in PHP 8.1.2 running the server, with defacement messages similar to a recent Everest ransomware hack suggesting a possible link.
- The leaked database includes twenty tables with nearly 60,000 unique bitcoin addresses, 4,442 negotiation messages between victims and affiliates, and a users table listing 75 admins with plaintext passwords.
- The LockBit operator known as LockBitSupp acknowledged the security breach, assuring that no private keys or victim information were compromised. Meanwhile, the defaced affiliate panels prominently featured a message discouraging criminal activity, signed off with a note referencing Prague.
- This incident follows the 2024 Operation Cronos takedown of LockBit's infrastructure and adds to the gang's damaged reputation, though it remains uncertain if this breach will end their operations.
20 Articles
20 Articles
The LockBit ransomware site was breached, database dump was leaked online
Lockbit ransomware group has been compromised, attackers stole and leaked data contained in the backend infrastructure of their dark web site. Hackers compromised the dark web leak site of the LockBit ransomware gang and defaced it, posting a message and… Read more → The post The LockBit ransomware site was breached, database dump was leaked online appeared first on IT Security News.
Ransomware news headlines trending on Google - Cybersecurity Insiders
LockBit Ransomware Gang Becomes Victim of Data Breach The infamous LockBit ransomware group, known for its double extortion tactics and involvement in high-profile cybercriminal activities, has itself fallen victim to a significant data breach. The attack has resulted in the leakage of sensitive data, reportedly sourced from a MySQL database dump, raising questions about the security measures within these underground criminal syndicates. While t…
Coverage Details
Bias Distribution
- 75% of the sources are Center
To view factuality data please Upgrade to Premium
Ownership
To view ownership data please Upgrade to Vantage
