The LockBit ransomware gang has launched a new data leak site that will be used as part of a double extortion strategy aimed at scaring victims into paying ransom.
Since late 2019, ransomware gangs have adopted a double-blackmail tactic by stealing unencrypted files before encrypting computers on a network.
Ransomware gangs then use the stolen files and threaten users with posting the data on data leak websites to pressure them into paying a ransom.
Lockbit data leak website released
According to cybersecurity firm Kela, the hackers behind the LockBit ransomware posted a link to their new data leak website on a Russian-language hacking forum yesterday.
The data leak website has so far claimed two victims, an automation parts manufacturer and a shipping company.
The LockBit gang had previously launched a leak website, but shut it down around the time it joined the “Maze Cartel” and began using the Maze to publish stolen files.
With the launch of their data leak website, it is unknown whether they are distancing themselves from this “cartel” or simply want an exclusive website under control .
All ransomware attacks should be considered data breaches as ransomware operators not only steal data, but also search documents to see what they contain.
Because of this, companies need to be transparent about attacks so that employees and customers can be adequately protected from the risk of exposed data.
With the launch of the LockBit website, there are now a total of 17 ransomware data leakage websites used for the double blackmail tactic.
