B2B cyber security

Analysis of hacked LockBit data reveals attacks, structures and money flows

July 3, 2025

With the insights gained from the hacking of the LockBit structures and their documentation, databases, and the Qualys Threat Research Unit's existing knowledge of LockBit, the group's methods can be described in detail. Security teams are thus equipped with practical knowledge to improve their defenses. The LockBit ransomware group recently suffered a significant data breach. Its dark web partner panels were defaced with the message "Don't do crime, CRIME IS BAD xoxo from Prague," which links to a MySQL database dump. This archive contains an SQL file...

Cyber gang Lockbit website hacked

21 May 2025

| No comments

| Short news

The LockBit ransomware gang suffered a data breach in which its dark web affiliate panels were defaced and replaced with a message pointing to a MySQL database dump. This archive, first discovered by the threat actor Rey, contains an SQL file extracted from the website's affiliate panel's MySQL database. BleepingComputer's analysis revealed that this database contains 59.975 tables, some of which are interesting, including: A "btc_addresses" table containing XNUMX unique Bitcoin addresses. The "builds" table contains the individual builds created by affiliated companies for attacks. The table rows contain the public…

LockBit leak site hacked and data stolen

11 May 2025

| No comments

| Short news

Now LockBit has also fallen victim to another hacker: Not only was the group's leak page hacked, but the extortion data was also stolen or copied, and a short text message was left on the page. As the portal BleepingComputer reports, an internal negotiation correspondence between the LockBit ransomware group and one of its victims was compromised. A hacker managed to retrieve sensitive communication content containing details about ransom demands, negotiation strategies, and payment terms. The group normally strives to keep its operations private in order to protect the behavior of its victims and the dynamics of the…

Report: Trusted Windows applications abused

21 December 2024

| No comments

| PR News, Sophos

In its new Active Adversary Report 2024, Sophos proves the wolf in sheep's clothing: Cybercriminals are increasingly relying on trusted Windows applications for their attacks. Criminal use, commonly referred to as "living off the land" binaries, is increasing by 51 percent. Lockbit is the number 1 ransomware despite government intervention. Sophos' new Active Adversary Report, entitled "The Bite from Inside," provides a detailed look at the changing behaviors and techniques of attackers in the first half of 2024. The analysis data comes from almost 200 incident response cases that the Sophos X-Ops IR team and Sophos X-Ops Managed...

CosmicBeetle: Hackers imitate malware

1 November 2024

| No comments

| Short news

The hackers of the CosmicBeetle group primarily attack small and medium-sized companies. In their ransomware extortion letters, they imitate the inactive LockBit group. In addition, CosmicBeetle has joined the new ransomware service provider RansomwareHub. Researchers from the IT security manufacturer ESET have discovered new activities of the CosmicBeetle group. It is spreading ransomware to small and medium-sized companies (SMEs), mainly in Europe and Asia. It uses its ransomware ScRansom. In its extortion letters and websites, CosmicBeetle tries to exploit the reputation of the well-known, now inactive LockBit group to get victims to pay. In addition, the group is now…

The number of ransomware attacks is rising sharply

2 October 2024

| No comments

| Short news

According to the "Ransomware Review: First Half of 2024", a significant increase in ransomware attacks was observed worldwide in the first half of 2024. With 1.762 published cases of compromise on leak sites, the number of attacks is 4,3% higher than in the same period last year. In addition, Unit 42 researchers have identified a new Ransomware-as-a-Service (RaaS) group that has been active since May 2024 and is spreading the Cicada3301 ransomware. The report provides insight into the tactics, techniques and procedures of the threat actors. Key findings of the review: Germany among the top 5 most affected...

Ransomware shifts its focus to SMEs

September 26, 2024

| No comments

| Short news

The recent strikes against ransomware groups are having an impact and are causing ransomware productivity to level off in 2024. However, attackers are increasingly focusing on SMEs. And the further bad news: LockBit is about to make a comeback. The new WithSecure report offers a detailed look at the latest developments in the world of ransomware. One of the key findings from the first half of 2024 is that ransomware industry productivity is no longer increasing after its peak in late 2023. There are also interesting developments in attack targets and industry dynamics. SMEs more in the focus of ransomware While…

Ransomware attacks increased by 12 percent

August 20, 2024

| No comments

| Short news

Ransomware attacks are a major and expensive problem for companies. After an attack, it takes an average of up to a month for the company to return to normal operations. Lockbit 3.0 is the most active hacker group worldwide. aDvens, one of the leading independent cyber security companies in Europe, has published its annual Threat Status Report. The report provides a detailed overview of the most important developments and trends in cyber threats observed by the aDvens team of experts, as well as the relevant protective measures against these threats. The most important findings from the report at a glance: Ransomware worldwide After worldwide…

Ransomware attacks 2023: Over 50 new families and variants

July 10, 2024

| No comments

| Short news

Ransomware attacks are a major and expensive problem for businesses. Last year, attacks increased significantly, according to a study by a leader in dynamic cybersecurity, which identified many new ransomware variants. Mandiant observed a significant increase in ransomware activity in 2023, with a 75 percent increase in reports of data leaks on websites. In particular, over 50 new ransomware families and variants were identified, with a third of these being variants of known families. Attackers are increasingly using legitimate tools such as ScreenConnect, Splashtop, Atera and Anydesk to penetrate victims' systems,…

Ransomware report: Successor to LockBit and ALPHV

June 19, 2024

| No comments

| Stories

The experts at Malwarebytes are constantly monitoring developments in ransomware attacks. Following the police and authorities' actions against LockBit and ALPHV, successors are already closing the gaps. In April 2024, the Threat Intelligence team at ThreatDown powered by Malwarebytes identified a total of 373 ransomware attacks - after 389 attacks in March. Most of the attacks in April were in the services (18 percent), manufacturing (14 percent) and construction (8 percent) sectors. LockBit and ALPHV: Law enforcement is having an impact Malwarebytes has found that the law enforcement actions against the ransomware groups LockBit and ALPHV are having an impact. In April,…

Tag: Lockbit

Analysis of hacked LockBit data reveals attacks, structures and money flows

Cyber gang Lockbit website hacked

LockBit leak site hacked and data stolen

Report: Trusted Windows applications abused

CosmicBeetle: Hackers imitate malware

The number of ransomware attacks is rising sharply

Ransomware shifts its focus to SMEs

Ransomware attacks increased by 12 percent

Ransomware attacks 2023: Over 50 new families and variants

Ransomware report: Successor to LockBit and ALPHV

Which user group do you belong to? (No tracking!)

Important links

Latest Articles & News

It was searched for

Social Media