hop from operation to operation. And those people, they’re definitely global. Cyber Daily: Given things like last year’s LockBit takedown, it’s easy to imagine that affiliates must move around all that time and that a takedown like that must have a huge...

leaks are not new; they are, in fact, data exposed in previous ransomware attacks by gangs such as RansomHub, FunkSec, and LockBit. Not only does the data appear to be duplicated on mass, but so is the copy accompanying each leak. For instance, the...

becoming more popular than file encryption-based attacks. And despite high-profile takedowns of prominent actors such as LockBit and ALPHV, the number of victims exposed on darknet leak sites actually increased. In the wake of those takedowns, RansomHub...

active ransomware operation for the year, with 573 victims listed as of the end of November. The leader, though, was LockBit, which listed 579 posts in the same period, despite being relatively inactive in the last couple of months of the year....

to watch out for. And yet, despite the activity of law enforcement agencies, and being quiet most of the year, the LockBit operation still dominated the space. That said, 2024 also saw the newcomers debut as credible threats. Sarcoma, Arcus Media, Lynx,...

Ransomware giant LockBit has announced its 4.0 encryptor, teasing a return in early 2025. The group took a blow in February 2024 following a global takedown operation called Operation Cronos, which saw its site seized, its infrastructure dismantled,...

and most intriguing stories of the year, from CrowdStrike’s outage and amazing response to the takedown of ransomware giant LockBit. Croft kicks off with the epic story of the Change Healthcare hack, which saw the data of about a third of the population...

victims.” A number of these groups were rebrands of dismantled or other groups, particularly following the downfall of LockBit, which had been a cyber crime titan for some time until “Operation Cronos” dismantled its infrastructure and arrested a number...

After a rather long hiatus, LockBit is fighting back against the FBI, having written a personal birthday message to the bureau’s director, Christopher Asher Wray, saying it has exfiltrated data. In a post to Telegram, a user named Fox William Mulder...

targeted the Indonesian government, demanding a ransom of US$8 million. The group uses a minimally modified version of the LockBit 3.0 builder for its encryptor, according to WatchGuard. Like other ransomware groups, it poses as a helpful entity aiming...

even after they have been asked to rein it in,” Neuberger said. “The developer and administrator of the cyber criminal gang LockBit is Russian national Dmitry Khoroshev, whom our Department of Justice has charged for committing hacking crimes. “We...

Uncut podcast, hosts David Hollingworth and Daniel Croft detail multiple Australian hacks, theft of frequent flyer points, LockBit striking back, and the launch of the Australian Cyber Network. Croft gets things started with a rundown of Australia’s...

Kingsley-based TPG Aged Care has been listed as a victim on LockBit’s leak site, and several internal documents with personal details of elderly clients have already been published. An affiliate of the LockBit ransomware gang is claiming to have...

around the world. Croft opens the podcast with the most recent developments in law enforcement’s efforts to tackle the LockBit ransomware gang, with four arrests made and sanctions placed against one of the gang’s major affiliates. Hollingworth then...

in the Evil Corp cyber crime gang, while Ryzhenkov was indicted overnight following his ousting as an affiliate of the LockBit ransomware gang. The sanctions “make it a criminal offence to provide assets” to the three Evil Corp members or to use data or...

LockBit 3.0 has taken another critical blow after global law enforcement agencies announced overnight that four more individuals connected to the ransomware gang had been arrested as part of Operation Cronos. Yesterday (1 October), global law...

according to reports, and is best known as a result of being deployed by a threat actor following a failed deployment of LockBit ransomware back in September 2023. The group, like most ransomware gangs, has a standardised ransom note that claims it has...

Global law enforcement has seemingly resurrected the seized dark web leak site of the LockBit ransomware gang once again, teasing new arrests and information. LockBit was seized as part of Operation Cronos in February this year, an international sting...

and more. The threat actor has been active since 2021, deploying ransomware payloads from other ransomware gangs, including LockBit, ALPHV (BlackCat), Hive, Hunters International and, most recently, Embargo. “Embargo ransomware is a new strain developed...

the Vanir Group leader laid out the gang’s operations. “Vanir Group is made up of ex-affiliates of groups like Karakurt and LockBit as well as Knight ransomware, they were all disgruntled for whatever reasons and they came to us,” BlackEyedBastard said...