LockBit ransomware leaked online by angry developer

Date:
Thu, 22 Sep 2022 17:57:19 +0000

Description:
A LockBit developer was allegedly angry with the leadership and leaked the source code online.

FULL STORY ======================================================================

Someone has leaked the latest version of LockBits encryptor to the internet, and while at first it might seem like a data breach and theft, the ransomware operators public representative claims its actually the work of a disgruntled developer.

A brand new Twitter account named Ali Qushji claimed their team hacked the servers of LockBit and found a builder for the LockBit 3.0 ransomware encryptor. Following the tweet, malware source code library VX-Underground chimed in, saying they were contacted by a user named protonleaks on
September 10, with the same content.

The same source also said that LockBitSupp, the public representative of the LockBit operation, confirmed that this was not the work of a hacking group, but rather a disgruntled developer, unsatisfied with the ransomware operators leadership. Upset with leadership

"We reached out to Lockbit ransomware group regarding this and discovered
this leaker was a programmer employed by Lockbit ransomware group," VX-Underground tweeted (and subsequently deleted the tweet). "They were upset with Lockbit leadership and leaked the builder."

BleepingComputer has since confirmed the authenticity of the leak, stating its the LockBit 3.0 encryptors builder, codenamed LockBit Black, that was leaked. The version, thats been in the testing phase for two months leading
up to June, came with a number of new features, including anti-analysis, a ransomware bug bounty program, and new methods of extortion. Read more

This ransomware spreads across hundreds of devices in no time at all

Windows Defender hacked to deploy this dangerous ransomware

Here's our list of the best antivirus tools today

Leaking the builder doesnt mean whoever gets infected with LockBit can now easily decrypt the hijacked data. Instead, it means that other threat actors can compile their own versions with ease, tweaking various configuration options, the ransom note, and other details. While that might hurt LockBits operations to some extent, it also means that organizations could soon be facing an even bigger number of ransomware strains.

This is not the first time an encryptors source code leaked online. At the start of Russias invasion on Ukraine, a hacker leaked Contis source code, a ransomware group that publicly supported the invasion at the time. Check out our list of the best malware removal solutions out there

Via: BleepingComputer



======================================================================
Link to news story: https://www.techradar.com/news/lockbit-ransomware-leaked-online-by-angry-devel oper/


--- Mystic BBS v1.12 A47 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)