Lockbit is responsible for 2 more attacks in Mexico and USA. The victims are Moto Repuestos Monterrey and Saint Anthony Hospital.
Lockbit is currently the most feared ransomware actor for a number of reasons. The main one is the actor’s veteran status and level of sophistication. Lockbit has been active for nearly 5 years, during which it has suffered numerous upgrades.
The ransomware actor is known to have improved its code considerably and adjust its MOs along the way. They even created a trademark malware called Stealbit, which they use to automate the data stealing process.
Lockbit is known to have rough negotiation tactics with a pretty unbending attitude. This explains why so many victims refuse to pay the ransom. This doesn’t mean much for Lockbit, though, because the organization is so active and powerful.
Unlike small and medium-sized ransomware actors, Lockbit prefers to go for quantity over quality. The organization is always active, always on the lookout for potential victims and relies on brute force rather than subtlety.
Lockbit’s preferred form of activity is the spray-and-pray tactic, although not much praying is involved, because the actor’s effectiveness leaves no room for uncertainty. Lockbit targets multiple victims within short periods of time.
This increases the chance of breakthrough, which often leads to multiple confirmed casualties. It’s not uncommon for Lockbit to infect 2 to 5-6 victims at once and negotiate with all of them at the same time. This type of MO is very good for business.
It has been reported that Lockbit has over 1,700 casualties on record and the numbers keep growing. This shows that Lockbit is powerful, resourceful, well financed, and fearless, which suggests potent connections in the ransomware world.
The organization also works with other cybercriminal groups to break harder-to-crack targets. This MO allowed Lockbit to collect close to $100 million in paid ransoms over the course of 3 years.
And only time can tell what the future holds.
We believe security online security matters and its our mission to make it a safer place.