Operation Cronos — Campaign Analysis & Threat Activity

Threat entity extracted from intelligence sources

Frequency
6
occurrences
First Seen
October 27, 2025
Last Seen
July 28, 2026

Operation Cronos is a ransomware threat campaign tied to the LockBit ecosystem, highlighted by expanding targeting as ransomware activity escalates under LockBit 5.0.

Overview

Operation Cronos is a ransomware threat campaign tied to the LockBit ecosystem, highlighted by expanding targeting as ransomware activity escalates under LockBit 5.0. It appears to be a mature, affiliate-driven operation leveraging LockBit tooling to broaden its victim pool, underscoring its significance due to widespread impact across sectors.

Related Threat Clusters

  • LockBit 5.0 Launches New Variants Targeting Multiple Platforms

    LockBit ransomware has introduced four new variants of its 5.0 payload, targeting Windows and Linux systems, as well as VMware ESXi hypervisors. The variants include LB_Black_14_01_2026 for Windows, and…

    1 article · Updated January 23, 2026
  • Operation Cronos Successfully Dismantles LockBit Ransomware Group

    Operation Cronos, an international law enforcement initiative, effectively dismantled the LockBit ransomware group, which operated from 2020 to 2024 and was responsible for over 2,500 attacks worldwide, extorting more…

    2 articles · Updated July 28, 2026
  • UK's Dynamic Cybersecurity Approach Discussed at DSEI

    During a recent parliamentary hearing, Lord Sedwill emphasized the need for the UK to adopt a dynamic approach to cybersecurity that includes ongoing cyber operations to maintain an advantage over adversaries. This…

    2 articles · Updated February 10, 2026
  • Cybercrime Costs Global Economy $10.5 Trillion in 2025

    In 2025, cybercrime is projected to cost the global economy $10.5 trillion, making it the world's third-largest economy. This marks a significant increase from the estimated $600 billion annual cost in 2018, reflecting…

    2 articles · Updated November 26, 2025

Recent Intelligence Reports

  • Operation Cronos dismantled LockBit ransomware group by undermining affiliate trust — Feeds.Feedburner · July 28, 2026
  • FBI: Breaking Affiliate Trust Sped Along LockBit's Takedown — Darkreading · July 27, 2026
  • Towards a British Approach to Cyber Campaigning | Royal United Services Institute — My.Rusi · February 10, 2026
  • New LockBit 5.0 variants, affiliate panel uncovered — Scworld · January 23, 2026
  • The Cybercrime Assembly Line in 2025: Everything as a Service, Telegram, and AI — Channele2E · November 26, 2025
  • LockBit 5.0 expands targeting amid ransomware escalation — Computerweekly · October 27, 2025

CVSS v3.1 Breakdown