Latest LockBit news

Police arrest LockBit ransomware members, release decryptor in global crackdown

Law enforcement arrested two operators of the LockBit ransomware gang in Poland and Ukraine, created a decryption tool to recover encrypted files for free, and seized over 200 crypto-wallets after hacking the cybercrime gang's servers in an international crackdown operation.
- Sergiu Gatlan
- February 20, 2024
- 06:30 AM
- 2
LockBit ransomware disrupted by global police operation

Law enforcement agencies from 10 countries have disrupted the notorious LockBit ransomware operation in a joint operation known as ''Operation Cronos."
- Sergiu Gatlan
- February 19, 2024
- 04:38 PM
- 1
LockBit claims ransomware attack on Fulton County, Georgia

The LockBit ransomware gang claims to be behind the recent cyberattack on Fulton County, Georgia, and is threatening to publish "confidential" documents if a ransom is not paid.
- Ionut Ilascu
- February 14, 2024
- 06:07 PM
- 0
Bank of America warns customers of data breach after vendor hack

Bank of America is warning customers of a data breach exposing their personal information after one of its service providers was hacked last year.
- Sergiu Gatlan
- February 12, 2024
- 06:32 PM
- 2
The Week in Ransomware - February 2nd 2024 - No honor among thieves

Attacks on hospitals continued this week, with ransomware operations disrupting patient care as they force organization to respond to cyberattacks.
- Lawrence Abrams
- February 02, 2024
- 06:33 PM
- 0
The Week in Ransomware - January 26th 2024 - Govts strike back

Governments struck back this week against members of ransomware operations, imposing sanctions on one threat actor and sentencing another to prison.
- Lawrence Abrams
- January 27, 2024
- 12:19 PM
- 0
The Week in Ransomware - January 12th 2024 - Targeting homeowners' data

Mortgage lenders and related companies are becoming popular targets of ransomware gangs, with four companies in this sector recently attacked.
- Lawrence Abrams
- January 12, 2024
- 05:06 PM
- 1
Capital Health attack claimed by LockBit ransomware, risk of data leak

The Lockbit ransomware operation has claimed responsibility for a November 2023 cyberattack on the Capital Health hospital network and threatens to leak stolen data and negotiation chats by tomorrow.
- Bill Toulas
- January 08, 2024
- 10:53 AM
- 0
The Week in Ransomware - December 29th 2023 - LockBit targets hospitals

It's been a quiet week, with even threat actors appearing to take some time off for the holidays. We did not see much research released on ransomware this week, with most of the news focusing on new attacks and LockBit affiliates increasingly targeting hospitals.
- Lawrence Abrams
- December 29, 2023
- 03:39 PM
- 0
Lockbit ransomware disrupts emergency care at German hospitals

German hospital network Katholische Hospitalvereinigung Ostwestfalen (KHO) has confirmed that recent service disruptions were caused by a Lockbit ransomware attack where the threat actors gained access to IT systems and encrypted devices on the network.
- Bill Toulas
- December 27, 2023
- 04:05 PM
- 1
The Week in Ransomware - December 22nd 2023 - BlackCat hacked

Earlier this month, the BlackCat/ALPHV ransomware operation suffered a five-day disruption to their Tor data leak and negotiation sites, rumored to be caused by a law enforcement action.
- Lawrence Abrams
- December 22, 2023
- 04:20 PM
- 0
The Week in Ransomware - December 15th 2023 - Ransomware Drama

The big news over the past two weeks is the continued drama plaguing BlackCat/ALPHV after their infrastructure suddenly stopped working for almost five days. Multiple sources told BleepingComputer that this outage was related to a law enforcement operation, but BlackCat claims the outages were caused by a hardware/hosting issue.
- Lawrence Abrams
- December 15, 2023
- 04:18 PM
- 0
LockBit ransomware now poaching BlackCat, NoEscape affiliates

The LockBit ransomware operation is now recruiting affiliates and developers from the BlackCat/ALPHV and NoEscape after recent disruptions and exit scams.
- Lawrence Abrams
- December 13, 2023
- 01:22 PM
- 0
Citrix warns admins to kill NetScaler user sessions to block hackers

Citrix reminded admins today that they must take additional measures after patching their NetScaler appliances against the CVE-2023-4966 'Citrix Bleed' vulnerability to secure vulnerable devices against attacks.
- Sergiu Gatlan
- November 21, 2023
- 11:36 AM
- 0
The Week in Ransomware - November 17th 2023 - Citrix in the Crosshairs

Ransomware gangs target exposed Citrix Netscaler devices using a publicly available exploit to breach large organizations, steal data, and encrypt files.
- Lawrence Abrams
- November 17, 2023
- 06:26 PM
- 0
LockBit ransomware exploits Citrix Bleed in attacks, 10K servers exposed

The Lockbit ransomware attacks use publicly available exploits for the Citrix Bleed vulnerability (CVE-2023-4966) to breach the systems of large organizations, steal data, and encrypt files.
- Bill Toulas
- November 14, 2023
- 03:03 PM
- 0
LockBit ransomware leaks gigabytes of Boeing data

The LockBit ransomware gang published data stolen from Boeing, one of the largest aerospace companies that services commercial airplanes and defense systems.
- Ionut Ilascu
- November 12, 2023
- 06:49 PM
- 3
Kyocera AVX says ransomware attack impacted 39,000 individuals

Kyocera AVX Components Corporation (KAVX) is sending notices of a data breach exposing personal information of 39,111 individuals following a ransomware attack.
- Bill Toulas
- November 09, 2023
- 04:43 PM
- 0
Boeing confirms cyberattack amid LockBit ransomware claims

Aerospace giant Boeing is investigating a cyberattack that impacted its parts and distribution business after the LockBit ransomware gang claimed that they breached the company's network and stole data.
- Sergiu Gatlan
- November 02, 2023
- 11:16 AM
- 0
Hackers use new 3AM ransomware to save failed LockBit attack

A new ransomware strain called 3AM has been uncovered after a threat actor used it in an attack that failed to deploy LockBit ransomware on a target network.
- Ionut Ilascu
- September 13, 2023
- 08:29 AM
- 0