Tag: Lockbit

Back in October, the APT group LockBit reported that Boeing's systems had been penetrated and a lot of data had been stolen. Shortly afterwards, the group complained online because Boeing was apparently not willing to negotiate. Since no ransom appears to have been paid, LockBit has now published around 43 GB of data on the darknet. Fewer and fewer companies are paying for data stolen by cyber attackers. This is probably also the case with Boeing, which was hacked by LockBit at the end of October 2023, the data was encrypted using ransomware and stolen. Following the classic strategy of double extortion, LockBit released…

LockBit: Stolen Shimano data probably published

14 November 2023

According to LockBit, the Japanese bicycle parts manufacturer Shimano was the target of a ransomware attack and was apparently unwilling to pay the ransom. The blackmail gang then threatened to put the stolen data online. Now they are probably available. Cybercriminals from LockBit say they have successfully penetrated the Japanese manufacturer's network and accessed several terabytes of data. After Shimano ignored an ultimatum from the attackers, they announced that they would publish the stolen company data. More than 4,5 terabytes of various company data are said to be on the darknet site of the Russian ransomware group LockBit...

Ransomware: Increasing numbers, increasing ransom demands

11 October 2023

In the first half of 2023, ransomware attacks increased by 46%. The main attacker is still Lockbit, the main victims are SMEs. This is shown by the Incident Response Ransomware Report with its Dark Web Monitoring. In Arctic Wolf's Incident Response Ransomware Report, the company shares current incident response (IR) case data from its Security Operations Platform and the latest dark web monitoring insights from Arctic Wolf Labs. Dark Web Monitoring Shows Sharp Increase in Ransomware Attacks Threat actors maintain so-called leak or shame sites on the Dark Web. On these sites they threaten their victims with publishing their data and...

Ransomware: Germany popular target for attackers

8 October 2023

Last year, Germany was the fourth most attacked country in the world. The logistics, construction and technology industries are the main targets, according to Malwarebytes ransomware analysis. In the twelve months from July 2022 to June 2023, Germany remains the fourth most attacked country in the world and the most attacked country outside the English-speaking world. Ransomware attacks are on the rise As in the US and UK, the number of ransomware attacks has increased significantly over the past four months. March, April and May were actually the most affected months...

LockBit adopts attack code for macOS targets

July 8, 2023

| Kaspersky, Short news

According to Kaspersky cybersecurity experts, LockBit recently upgraded its multiplatform capabilities. By acquiring attack code from notorious ransomware groups BlackMatter and DarkSide, LockBit is now also targeting macOS systems. LockBit is known to attack companies around the world and cause significant financial and operational damage. The recent Kaspersky report shows LockBit's determination to expand their reach and maximize the impact of their malicious activities. BlackMatter and DarkSide code adoption The cybersecurity community has observed LockBit adopting code from other notorious ransomware groups such as BlackMatter and DarkSide. This…

LockBit: Huge chip manufacturer probably not a victim after all

July 4, 2023

LockBit claims to have hacked the Taiwanese company TSMC and now wants a ransom of 70 million dollars. The group is the third largest chip manufacturer in the world. TSMC replies that only a small supplier was caught. On the LockBit 3 leak page you can still see the leak that the Taiwanese company TSMC was hacked and data was stolen. The APT group demands a ransom of 70 million dollars for the data or wants to publish it on the Internet. The group is probably demanding the highest ransom that has ever been demanded. Not TSMC but a…

Ransomware analysis for Germany: Black Basta leading

22 May 2023

Malwarebytes' threat intelligence team analyzed the activities of ransomware groups in Germany from April 2022 to March 2023 and published them in their country-specific ransomware report. The result: Germany is a major global target for ransomware attacks. Black Basta in particular likes to attack. In the Malwarebytes ranking, Germany occupies fourth place with 114 known attacks - after the USA with 1.167 attacks, Great Britain with 163 attacks and Canada with 132 attacks. Within the EU, Germany is the country that has been attacked the most. Additionally, Germany is the most attacked country where English…

New ransomware Rorschach discovered

8 April 2023

A global leader in cyber security solutions and the Check Point Incident Response Team are warning of a new ransomware that has already attacked a US company. Security researchers dubbed this Rorschach and describe it as one of the fastest ransomware ever in terms of data encryption speed. It is highly customizable and has unique features. Rorschach was injected in this first discovered attack via DDL files incidentally downloaded from cybersecurity firm Palo Alto Networks' certified commercial security product Cortex XDR Dump Service Tool. This is an unusual method of…

Ransomware Report: LockBit in attack mode

5 April 2023