Latest LockBit news

Linux version of LockBit ransomware targets VMware ESXi servers

LockBit is the latest ransomware gang whose Linux encryptor has been discovered to be focusing on the encryption of VMware ESXi virtual machines.
- Lawrence Abrams
- January 26, 2022
- 06:40 PM
- 0
The Week in Ransomware - November 5th 2021 - Placing bounties

Law enforcement continues to keep up the pressure on ransomware operations with infrastructure hacks and million-dollar rewards, leading to the shut down of criminal operations.
- Lawrence Abrams
- November 05, 2021
- 06:05 PM
- 0
BlackMatter ransomware moves victims to LockBit after shutdown

With the BlackMatter ransomware operation shutting down, existing affiliates are moving their victims to the competing LockBit ransomware site for continued extortion.
- Lawrence Abrams
- November 03, 2021
- 12:47 PM
- 0
Accenture confirms data breach after August ransomware attack

Global IT consultancy giant Accenture confirmed that LockBit ransomware operators stole data from its systems during an attack that hit the company's systems in August 2021.
- Sergiu Gatlan
- October 15, 2021
- 10:49 AM
- 0
LockBit gang leaks Bangkok Airways data, hits Accenture customers

Bangkok Airways, a major airline company in Thailand, confirmed it was the victim of a cyberattack earlier this month that compromised personal data of passengers.
- Ionut Ilascu
- September 01, 2021
- 03:36 AM
- 0
Accenture confirms hack after LockBit ransomware data leak threats

Accenture, a global IT consultancy giant has likely been hit by a ransomware cyberattack. The ransomware group LockBit is threatening to publish data on its leak site within hours, as seen by BleepingComputer.
- Ax Sharma
- August 11, 2021
- 12:22 PM
- 1
Australian govt warns of escalating LockBit ransomware attacks

The Australian Cyber Security Centre (ACSC) warns of an increase of LockBit 2.0 ransomware attacks against Australian organizations starting July 2021.
- Sergiu Gatlan
- August 08, 2021
- 10:00 AM
- 2
The Week in Ransomware - August 6th 2021 - Insider threat edition

If there is one thing we learned this week, it's that not only are corporations vulnerable to insider threats but so are ransomware operations.
- Lawrence Abrams
- August 06, 2021
- 05:16 PM
- 1
LockBit ransomware recruiting insiders to breach corporate networks

The LockBit 2.0 ransomware gang is actively recruiting corporate insiders to help them breach and encrypt networks. In return, the insider is promised million-dollar payouts.
- Lawrence Abrams
- August 04, 2021
- 12:19 PM
- 0
LockBit ransomware now encrypts Windows domains using group policies

An new version of the LockBit 2.0 ransomware has been found that automates the encryption of a Windows domain using Active Directory group policies.
- Lawrence Abrams
- July 27, 2021
- 05:10 PM
- 1
Ransomware gangs now creating websites to recruit affiliates

Ever since two prominent Russian-speaking cybercrime forums banned ransomware-related topics [1, 2], criminal operations have been forced to promote their service through alternative methods.
- Ionut Ilascu
- June 28, 2021
- 02:55 PM
- 0
UK rail network Merseyrail likely hit by Lockbit ransomware

UK rail network Merseyrail has confirmed a cyberattack after a ransomware gang used their email system to email employees and journalists about the attack.
- Lawrence Abrams
- April 28, 2021
- 04:15 AM
- 0
The Week in Ransomware - February 5th 2021 - Data destruction

This week we saw a few large scale attacks and various ransomware reports indicating ransom payments are falling, while attacks are increasingly destroying data permanently. The good news is a new ransomware decryptor was released, allowing victims to recover files for free.
- Lawrence Abrams
- February 05, 2021
- 06:33 PM
- 1
LockBit ransomware moves quietly on the network, strikes fast

LockBit ransomware takes as little as five minutes to deploy the encryption routine on target systems once it lands on the victim network.
- Ionut Ilascu
- October 21, 2020
- 10:28 AM
- 0
LockBit ransomware launches data leak site to double-extort victims

The LockBit ransomware gang has launched a new data leak site to be used as part of their double extortion strategy to scare victims into paying a ransom.
- Lawrence Abrams
- September 16, 2020
- 09:26 AM
- 0
Interpol: Lockbit ransomware attacks affecting American SMBs

American medium-sized companies are actively targeted by LockBit ransomware operators according to an Interpol report on the impact the COVID-19 pandemic had on cybercrime around the world.
- Sergiu Gatlan
- August 04, 2020
- 10:27 AM
- 0
Ransomware gangs team up to form extortion cartel

Ransomware gangs are teaming up to extort victims through a shared data leak platform, and the exchange of tactics and intelligence.
- Lawrence Abrams
- June 03, 2020
- 01:08 AM
- 1
LockBit ransomware self-spreads to quickly encrypt 225 systems

A feature of the LockBit ransomware allows threat actors to breach a corporate network and deploy their ransomware to encrypt hundreds of devices in just a few hours.
- Lawrence Abrams
- May 04, 2020
- 05:09 PM
- 0
The Week in Ransomware - May 1st 2020 - Banishing the Shade

For the victims of the Shade Ransomware, otherwise known as Troldesh, this was an excellent week as the threat actors released over 750,000 decryption keys for their victims.
- Lawrence Abrams
- May 01, 2020
- 06:19 PM
- 2
The Week in Ransomware - February 28th 2020 - Data Leaks Everywhere

Over the past two weeks, we continue to see small towns, fire departments, hospitals, and companies being attacked by ransomware.
- Lawrence Abrams
- February 28, 2020
- 06:47 PM
- 1