Ransomware gangs have started working together to extort victims through a leakage platform data! Companies, from now on, will be faced with a ransomware cartel.
In November 2019, the operators of the Maze Ransomware turned ransomware attacks into data breaches, stealing data before encrypting it and then publishing it on sites they created for this purpose. The hackers use “Maze News” to “sham” and take revenge on victims who do not pay the ransom.
This extortion tactic was quickly adopted by other ransomware groups. Currently, at least 13 gangs are publishing the stolen data of victims who do not pay the ransom.
Creating a ransomware cartel
The Maze gang is becoming an even bigger threat, creating a ransomware cartel. This means it has begun collaborating with other groups. The groups share stolen data and tactics and extort money from victims .
Security firm KeLa said today that Maze operators added information and files from an international architecture firm to the site . However, what made the leak more concerning is that the information did not come from a Maze ransomware attack, but rather from LockBit ransomware.
LockBit is a Ransomware-as-a-Service (RaaS) that appeared in September 2019. Initially, it was used exclusively by its operators. Later, they started advertising it on Russian hacking forums. Client hackers could use it in their own hacking operations.
Maze and LockBit collaboration
The Maze gang confirmed that they are working with LockBit to share their expertise and have a common data exfiltration platform. The hackers also stated that a third ransomware gang will join the cartel in the coming days.
The Maze ransomware hackers said they are offering their platform to other groups to expose their victims' data. But at the same time, they are also offering them their experience and reputation. “We treat other groups as our partners, not our competitors,” the gang said.
The ransomware group is in discussions with several other groups about participating in this collaborative effort.
“We will be publishing a new group in a few days, and we expect more groups to come in the coming weeks,” Maze operators said.
Individual ransomware attacks were already very successful. Now, with the creation of the cartel, things will get worse. Hackers will join forces and exchange information and tactics that will likely make them even more dangerous and effective. Companies need to be more careful than ever!
