2023. The AFP’s Operation Aquila also assisted law enforcement agencies from 10 countries in the campaign against the LockBit ransomware-as-a-service operation, the most prolific ransomware operator in the world. Australian businesses and individuals...

authentication. From the law enforcement side, while they have had some recent successes with takedowns and arrests from LockBit to Qakbot, these successes have proven to be more akin to temporary disruptions than longer-term or permanent wins.” You can...

the gang only began operations in February of this year, but it does note that the gang appears to have some links to the LockBit gang based on the design of its darknet leak site. Dispossessor – also known as Radar, the FBI said – is, possibly was, a...

groups trends, patterns, and observations Dragos’ analysis of numerous ransomware data from Q2 indicates that the LockBit group was behind most attacks against industrial organisations, with approximately 21 per cent (or 66 incidents) of observed...

high rate of attacks is that – according to CISA – several “high-profile affiliates” have migrated to RansomHub from the LockBit and ALPHV ransomware operations. Given both of the latter gangs have experienced their own high-profile run-ins with...

the Vanir Group leader laid out the gang’s operations. “Vanir Group is made up of ex-affiliates of groups like Karakurt and LockBit as well as Knight ransomware, they were all disgruntled for whatever reasons and they came to us,” BlackEyedBastard said...

and more. The threat actor has been active since 2021, deploying ransomware payloads from other ransomware gangs, including LockBit, ALPHV (BlackCat), Hive, Hunters International and, most recently, Embargo. “Embargo ransomware is a new strain developed...

according to reports, and is best known as a result of being deployed by a threat actor following a failed deployment of LockBit ransomware back in September 2023. The group, like most ransomware gangs, has a standardised ransom note that claims it has...

in the Evil Corp cyber crime gang, while Ryzhenkov was indicted overnight following his ousting as an affiliate of the LockBit ransomware gang. The sanctions “make it a criminal offence to provide assets” to the three Evil Corp members or to use data or...

even after they have been asked to rein it in,” Neuberger said. “The developer and administrator of the cyber criminal gang LockBit is Russian national Dmitry Khoroshev, whom our Department of Justice has charged for committing hacking crimes. “We...

targeted the Indonesian government, demanding a ransom of US$8 million. The group uses a minimally modified version of the LockBit 3.0 builder for its encryptor, according to WatchGuard. Like other ransomware groups, it poses as a helpful entity aiming...

to watch out for. And yet, despite the activity of law enforcement agencies, and being quiet most of the year, the LockBit operation still dominated the space. That said, 2024 also saw the newcomers debut as credible threats. Sarcoma, Arcus Media, Lynx,...

becoming more popular than file encryption-based attacks. And despite high-profile takedowns of prominent actors such as LockBit and ALPHV, the number of victims exposed on darknet leak sites actually increased. In the wake of those takedowns, RansomHub...

hop from operation to operation. And those people, they’re definitely global. Cyber Daily: Given things like last year’s LockBit takedown, it’s easy to imagine that affiliates must move around all that time and that a takedown like that must have a huge...

leak site, the group is likely composed of non-native English speakers. The group is believed to have some links to the LockBit ransomware operation and engages in double extortion tactics, locking victims out of their data and threatening to publish it...

targeting entities within Ukraine and elsewhere in Europe and the threat posed by ransomware operators. Just last week, the LockBit ransomware gang, a prolific Russian-speaking group, claimed to have gained access to information that could destroy the...

Malaysia, though that appears to be entirely based on the name alone. The group is believed to have some links to the LockBit ransomware operation and engages in double-extortion tactics, locking victims out of their data and threatening to publish it...

exfiltration of data. Prior to this, in 2023, Royal Mail International suffered a ransomware attack at the hands of the LockBit ransomware group, who confused it with the much larger Royal Mail and demanded a ransom of roughly AU$114.5 million (£65.7...

revealed that every leak was recycled from previous ransomware attacks claimed by groups such as RansomHub, FunkSec, and LockBit. The data volumes, the data itself, even the descriptions of the leaks themselves were taken straight from previous leak...

to the bottom of a very confusing situation. They also discuss more details that have emerged from behind the scenes of the LockBit gang, and an accidental data breach at the Australian Human Rights Commission. Things get wrapped up with the CIA’s...