The notorious ransomware gang, Lockbit, announced 2 more breaches today. The companies are located in the US and the UK and come from different industries. Lockbit hackers also posted short summaries of the 2 victims.
Lockbit has been targeted by the FBI in a joint operation earlier this year, but managed to overcome it with ease. The FBI aimed to dissolve the gang and seize its assets. Operation Cronos backfired, as Lockbit was able to bounce back within days.
At this moment, Lockbit occupies the first place in the top of the most dangerous and effective ransomware gangs in the world. The organization uses advanced tactics and MOs to encrypt the victims’ files and extract as much valuable data as possible.
In 2023 alone, Lockbit reached the top with 979 confirmed victims, which amounted to 24% of all ransomware attacks that year. Given the sheer amount of ransomware organizations operating today, these numbers are already astounding.
2024 would be the 4th year in a row that Lockbit has retained its undisputed king in the ransomware sphere. The organization is currently the most advanced and most active of all.
Lockbit functions based on the double-extortion practice. The operators infiltrate the victim’s system, encrypt the target files, and exfiltrate any valuable data they can find. They will also leave behind a ransomware note instructing the victims on how to contact them.
The financial issue is the one that jumps to mind first. If you want your system decrypted and your data back, you need to pay the ransom. Which, more often than not, is quite hefty.
Then you have the data loss itself. The hackers will gain access to your confidential data, and they may not give it back. Even paying the ransom won’t guarantee that. Studies show that many ransomware gangs keep the data even after the victims pay.
They will use it to their own advantage or sell it to interested third-parties. Or, which is typically the case, both.
Then there’s the legal problem. A business that experiences a ransomware breach resulting in massive data leaks will have legal problems to face. Because it was the business’s responsibility to keep their customers and employees’ data safe.
So, there’s every incentive to prevent ransomware attacks or, at the very least, handle them properly whenever they occur. Which, in simple terms, translates to adopting the no-negotiation approach.
If you ever get breached, work with cybersecurity experts to decrypt your system and regain access to your data. Don’t pay the ransom because, as data shows, that doesn’t guarantee that the hackers will delete your data.
We believe security online security matters and its our mission to make it a safer place.