Hackers broke Lockbit and merged nearly 60,000 bitcoin addresses

Unknown people broke the infrastructure of the hacker group of Lockbit’s hacking and released an array and configurations for attacks. About it reports Bleeping Computer.

On the Lockbit shadow forums, a message with content appeared:

Don’t do crime Crime Is Bad XOXO FROM PRAGUE

According to the researcher under Nick Rey, in the merged archive found:

• Bitcoin games tables are probably related to Lockbit partners;
• setting up attacks with servers and target files;
• journals of communication with the victims, which contained redemption requirements;
• 75 admins and partners with open password.

Response from LockBitsuppp (this is a translated Image): pic.twitter.com/l54g1a5hxz

– rey (@reyxbf) May 7, 2025

Lockbit Administrator Dmitry Khorasov has confirmed the fact of the attack, but assured that the private keys of cryptomamen were not compromised.

According to Bleeping Computer, the leakage happened on April 29. The group used an outdated and vulnerable version of PHP 8.1.2, which could allow the attackers to penetrate the system. The hacking style is similar to the attack on the Darknet portal Everest, so journalists suggest that the incidents may be associated.

Recall that in February 2024 the British agency Nca partially captured the Lockbit infrastructure and arrested more than 200 cryptomamen related to the group.

The gun