European and American law enforcement authorities have managed to arrest two members of the notorious LockBit group. This important strike against the ransomware group represents a significant step forward in the fight against organized cybercrime.
LockBit is one of the most well-known threat actors, brazenly attacking hospitals and critical infrastructure itself, unlike many of its competitors. With the arrest of two people and the ongoing investigation against the group's developers and partners, law enforcement authorities are sending a clear message to other malware operators: cybercrime has significant consequences.
Cybercrime groups are increasingly being exposed
The current arrest is just one of many in recent months. It illustrates the positive development in the area of criminal prosecution of cybercriminals. It was only in December that the FBI, together with international law enforcement agencies, seized BlackCat's servers and leak site. Recently, the FBI intercepted the Mooboot malware deployed by Fancy Bear on Ubiquiti routers. The router's firewall was reconfigured to prevent attackers from gaining access again. The FBI's involvement in the effort to take down LockBit shows how proactive the FBI and other law enforcement agencies are against cyber threats.
Taking down the two largest ransomware gangs, LockBit and BlackCat, has the potential to permanently alter the threat landscape by further driving the fragmentation and decentralization of cybercrime groups. This highlights the need for security teams to move away from traditional methods of detecting security breaches based on known Indicators Of Compromise (IOC). An approach that focuses on identifying tactics, techniques, and procedures (TTPs) is more sustainable because it takes into account the dynamic methods of threat actors and emerging threats. (Christian Have, CTO at Logpoint)
More at Logpoint.com
About Logpoint Logpoint is the manufacturer of a reliable, innovative platform for cybersecurity operations. With the combination of advanced technology and a deep understanding of customers' challenges, Logpoint strengthens the capabilities of security teams and helps them combat current and future threats. Logpoint offers SIEM, UEBA, SOAR and SAP security technologies that converge into a complete platform that efficiently detects threats, minimizes false positives, autonomously prioritizes risks, responds to incidents and more.