News on Medial

LockBit ransomware officially returns — hackers hit back with new attacks following apparent shutdown

Techradar · 1y

LockBit, a notorious ransomware operator, has reemerged with new encryptors, infrastructure, and data leak and negotiation websites. Researchers at Zscaler found that new LockBit victims received ransom notes with different Tor URLs for further instructions. Two new encryptor variants were also discovered. LockBit's negotiation server is back in operation but only for new victims. The reappearance of LockBit comes after the UK's National Crime Agency (NCA) and international partners dismantled its infrastructure, gaining access to decryptors and stolen data. LockBit's owners later claimed to have been targeted due to sensitive information stolen from Fulton County, potentially impacting the US election.