B2B cyber security

After the LockBit blow: What about ransomware attacks?

16 April 2024

In a current report, Trend Micro analyzes the ransomware landscape and provides an outlook on the impact the interruption of LockBit activities has on it. LockBit was not completely broken up, but its activity was severely suppressed and new malicious code developments were discovered and thus rendered unusable. In collaboration with the British National Crime Agency (NCA), Trend Micro was able to provide detailed analyzes of the ransomware group's activities and permanently disrupt the entire functionality of the malware. Since 2022, LockBit and BlackCat have consistently been among the Ransomware-as-a-Service (RaaS) providers with the most discoveries. Globally you can...

IT security: Basis for LockBit 4.0 defused

March 25, 2024

| No comments

| Short news, TrendMicro

In collaboration with the UK's National Crime Agency (NCA), Trend Micro analyzed the in-development and unreleased version of the LockBit encryptor, rendering the entire product line unusable to cybercriminals in the future. As a criminal group, LockBit was known for innovating and trying new things. In the course of this innovative development, LockBit has released several versions of its ransomware, from version v1 (January 2020) to LockBit 2.0 (nicknamed “Red”, from June 2021) to LockBit 3.0 (“Black”, from March 2022). In October 2021, the Linux threat actor introduced…

A comeback from Lockbit is likely

29. February 2024

| No comments

| Short news

It is fundamentally important for Lockbit to be visible again quickly. Victims are presumably less willing to pay as long as there are rumors that the group is no longer operational. “It has now become known that Lockbit, contrary to its own statements, does not delete the stolen data. One more reason to stand firm and not pay in the event of blackmail. They have set up a new .onion leak site. The group claims there that the investigating authorities used a PHP vulnerability for the takedown. This is a PR campaign. Lockbit wants to put the damage of the takedown into perspective and show strength...

LockBit is alive

28. February 2024

| No comments

| Short news, Sophos

A few days ago, international law enforcement authorities scored a decisive blow against Lockbit. However, according to a comment from Chester Wisniewski, Director, Global Field CTO at Sophos, some of their infrastructure is still online, which likely indicates that some of the Lockbit cybercriminal group have not yet been caught. The chance of them joining other groups or forming a new group would not be a surprise. Sophos X-Ops is now publishing a report about the recently known security vulnerability in the remote management and monitoring solution ScreenConnect. The detailed analysis also provides a…

Classification of the LockBit breakup

25. February 2024

| No comments

| Short news

European and American law enforcement authorities have managed to arrest two members of the notorious LockBit group. This important strike against the ransomware group represents a significant step forward in the fight against organized cybercrime. LockBit is one of the most well-known threat actors, which, unlike many of its competitors, brazenly attacks hospitals and critical infrastructure itself. With the arrest of two people and the ongoing investigation against the group's developers and partners, law enforcement authorities are sending a clear message to other malware operators: cybercrime has significant consequences. Cybercrime groups are increasingly exposed The current arrest...

FBI, Europol, NCA: APT group LockBit smashed!

21. February 2024

| No comments

| Stories

According to the authorities, Europol, the FBI and the British NCA have dismantled the APT group LockBit. At least it has all darknet leak sites under control and is probably already distributing decryption tools. The authorities even used the system of leak sites to distribute information and tools. It sounds too good to be true: A global network of authorities such as the FBI, Eruopol, NCA and many more have succeeded in striking a significant blow against the APT group LockBit. Officially, the group's network has been dismantled, the servers taken over, source codes and documents confiscated and...

Fast food chain Subway probably victim of Lockbit

25 January 2024

| No comments

| Short news

Many sources indicate that the Subway company was the victim of a cyberattack by LockBit. The operator Subway is currently not issuing a statement on this. There's still a countdown on Lockbit's leak page until February 2, 2024. What data could you get from Subway that hasn't already been published? This question should be clarified after February 2, 2024, after the countdown on LockBit's leak page has expired. The fast food chain Subway is listed as a victim of data theft. According to some other media, Subway denies...

LockBit: Cyber attack on clinics as a Christmas present

29 December 2023

| No comments

| Short news

At Christmas, the IT system of some clinics belonging to the Catholic Hospital Association of East Westphalia was attacked. The cyber attack is attributed to LockBit and, according to the clinic management, paralyzed all systems. However, the treatment of the patients is guaranteed. According to the Catholic Hospital Association of East Westphalia, the APT group LockBit attacked the IT systems for some of its clinics. These include the hospitals Franziskus Hospital Bielefeld, Sankt Vinzenz Hospital Rheda-Wiedenbrück and Mathilden Hospital Herford. The individual hospitals inform patients and relatives about the current status. Another three hospitals in the hospital association are not affected by the attack because they…

2024: The four most dangerous ransomware groups

22 December 2023

| No comments

| Stories, TrendMicro

Ransomware will continue to be one of the greatest threats to German companies in 2024. RaaS (Ransomware-as-a-Service) in particular is inspiring threat actors worldwide because it allows them to use state-of-the-art technology without deep technical understanding. Here are the four ransomware families that, based on current threat analyses, will pose a particular threat in 2024. The world of ransomware is constantly changing. Research by Trend Micro shows that many ransomware-as-a-service groups are no longer just targeting “big targets”. Instead, they focus on smaller companies that are less well protected. This worrying trend towards smaller and “softer” targets is…

LockBit responsible for German Energy Agency attack

19 December 2023

| No comments

| Short news

Now it's official: LockBit carried out the attack on the German Energy Agency - dena for short. On the APT group's leak page there is still a countdown until December 26, 2023. After that, all stolen data should be online. dena is now announcing accessibility again. The German Energy Agency – dena – reported a cyber attack on the weekend of November 11th to 12th. The servers were paralyzed and accessibility was only possible to a limited extent, according to the homepage. According to its own information, dena can now be reached again. However, further IT protection measures are still in progress. There are now…

Tag: Lockbit

After the LockBit blow: What about ransomware attacks?

IT security: Basis for LockBit 4.0 defused

A comeback from Lockbit is likely

LockBit is alive

Classification of the LockBit breakup

FBI, Europol, NCA: APT group LockBit smashed!

Fast food chain Subway probably victim of Lockbit

LockBit: Cyber attack on clinics as a Christmas present

2024: The four most dangerous ransomware groups

LockBit responsible for German Energy Agency attack

Which user group do you belong to? (No tracking!)

Important links

Latest Articles & News

It was searched for

Social Media