Global InformationLockbit information
 | |
| Formation | 2019 |
|---|---|
| Type | Cybercrime |
LockBit is a cybercriminal group proposing ransomware as a service (RaaS). Software developed by the group (also called ransomware) enables malicious actors who are willing to pay for using it to carry out attacks in two tactics where they not only encrypt the victim's data and demand payment of a ransom, but also threaten to leak it publicly if their demands are not met.[1]
According to a joint statement by various government agencies, LockBit was the world's most prolific ransomware in 2022.[2] It was estimated in early 2023 to be responsible for 44% of all ransomware incidents globally.[3]
In the United States between January 2020 and May 2023, Lockbit was used in approximately 1,700 ransomware attacks, with US$91 million paid in ransom to hackers.[4]
Government agencies did not formally attribute the group to any nation-state.[5] Software with the name "LockBit" appeared on a Russian-language based cybercrime forum in January 2020.[4] The group is financially-motivated.[3]
In February 2024 law enforcement agencies seized control of LockBit dark web sites used for attacks.[6][7] However, further attacks with LockBit ransomware were later reported, with the group attempting to perform a comeback. [8][9]
- ^ "Ransomware Spotlight: LockBit". Trendmicro. Archived from the original on 2023-07-07. Retrieved 2023-07-07.
- ^ "Understanding Ransomware Threat Actors: LockBit". CISA. 2023-06-14. Archived from the original on 2023-11-25. Retrieved 2023-11-25.
- ^ a b Tunney, Catharine (February 3, 2023). "Intelligence agency says ransomware group with Russian ties poses 'an enduring threat' to Canada". Canadian Broadcasting Corporation. Archived from the original on November 25, 2023. Retrieved November 25, 2023.
- ^ a b "Understanding Ransomware Threat Actors: LockBit". CISA. 2023-06-14. Archived from the original on 2023-11-25. Retrieved 2023-11-25.
- ^ Siddiqui, Zeba; Pearson, James; Pearson, James (2023-11-10). "Explainer: What is Lockbit? The digital extortion gang on a cybercrime spree". Reuters. Archived from the original on 2023-11-25. Retrieved 2023-11-25.
- ^ Sharwood, Simon (2024-02-20). "LockBit ransomware gang disrupted by global operation". The Register. Archived from the original on 2024-02-21. Retrieved 2024-02-21.
- ^ Jones, Conor (2024-02-20). "Cops turn LockBit ransomware gang's countdown timers against them". The Register. Archived from the original on 2024-02-21. Retrieved 2024-02-21.
- ^ Gatlan, Sergiu (22 February 2024). "ScreenConnect servers hacked in LockBit ransomware attacks". BleepingComputer. Archived from the original on 23 February 2024. Retrieved 23 February 2024.
despite the law enforcement operation against LockBit, it seems as though some affiliates are still up and running.
- ^ "Latest LockBit news". BleepingComputer. Archived from the original on 21 February 2024. Retrieved 23 February 2024. Developments added as they happen; latest 22 February 2024