The FBI has shared that it holds over 7,000 decryption keys associated with the LockBit ransomware operation. These keys are aimed at providing victims a way to recover their data without paying any ransom. Furthermore, the Bureau is proactively reaching out to known LockBit victims, and it encourages anyone who suspects they’ve been affected to visit the Internet Crime Complaint Center at ic3.gov.
What’s Happening & Why This Matters
LockBit is a ransomware gang that has been responsible for over 2,400 attacks worldwide. Of those attacks, at least 1,800 impacted entities in the U.S. Earlier in February, a multinational law enforcement operation named “Cronos,” led by the U.K. National Crime Agency, dismantled its online infrastructure.
The group’s administration and developer, Dmitry Yuryevich Khoroshev, was identified by authorities. One of his alleged actions was to name other ransomware operators to “go easy on him.” Despite these efforts, LockBit has continued to stay active under a new infrastructure, though not at the same levels as before. Moreover, data shows that the ransomware family has been tied to 28 confirmed attacks in April 2024.
A report from Veeam highlights that organizations experiencing a ransomware attack can recover, on average, only 57% of the compromised data, potentially leaving them vulnerable to significant data loss and a negative business impact.
As new players enter the scene, existing ransomware families are also enhancing their tactics to target advanced systems. TargetCompany, for instance, has been observed refining its tactics by leveraging a new Linux variant to target VMWare ESXi systems. The attacks utilize vulnerable Microsoft SQL servers to gain initial access.
TF Summary: What’s Next
The emergence of new ransomware threats and the evolving nature of existing ones underscores the importance of enhancing cybersecurity measures. With the potential for significant data loss and negative business impact from ransomware attacks, the adoption of robust security tools and practices will be vital for protecting organizational data.