News report # Operation Cronos dismantles LockBit ransomware gang TechTarget, February 20, 2024. Operation Cronos: the Europol figure of more than 14,000 rogue accounts used by LockBit actors for infrastructure and data exfiltration, referred for removal. **Source type:** News report **Published:** February 20, 2024 **Research grade:** S2 **Used in entries:** 2 ## Bibliographic record **Publisher:** TechTarget **Published:** February 20, 2024 **Source type:** News report **Research grade:** Source grade S2 **Language:** English **Official record:** Not an official publication **Address:** [https://www.techtarget.com/searchsecurity/news/366570614/Operation-Cronos-dismantles-LockBit-ransomware-gang](https://www.techtarget.com/searchsecurity/news/366570614/Operation-Cronos-dismantles-LockBit-ransomware-gang) **What it supports:** Operation Cronos: the Europol figure of more than 14,000 rogue accounts used by LockBit actors for infrastructure and data exfiltration, referred for removal **Dataset id:** src\_techtarget\_operation\_cronos\_2024 ## Research notes - By Rob Wright. How this source is used Cited 2 times across 2 record types. The role on each citation records what the source was relied on for. A primary source establishes the fact, a supporting source corroborates it, technical evidence describes the infrastructure, and a later outcome records what happened afterwards. Sources were reviewed to a research cutoff of August 23, 2026. Addresses recorded after that date are not reflected here. ## Cited by ### Takedown records 1 citation Cited on the takedown record itself. - [Operation Cronos wave 1](https://takedownindex.org/takedowns/operation-cronos-wave-1) Ransomware, February 2024 Supporting source ### Infrastructure 1 citation Cited for infrastructure recorded as acted on. - [more than 14,000 user accounts](https://takedownindex.org/takedowns/operation-cronos-wave-1) User accounts action not established, Operation Cronos wave 1 Supporting source [All sources](https://takedownindex.org/sources)