Interesting that the Russian news service Kommersant reported yesterday about a ransomware attack on a Russian company involving the Lockbit ransomware. The piece is light on details about how they determined it was lockbit, or what version (Lockbit's source and builders have been leaked over the years).
The story says the attack happened in December 2024, but I wonder if this was an isolated incident, and/or if someone is trying to sick the local authorities on Lockbit.
https://archive.ph/To7oV
BrianKrebs
npub1vc…0axsh
2025-02-26 16:09:16 UTC
Author Public Key
npub1vc39pnjdqd77zzdxff4qyv8h3x0ey2mkx33c3vl8egr0a9ysxkxsk0axshPublished at
2025-02-26 16:09:16 UTCEvent JSON
{
"id": "a774ddaa65dc340b43a4da338dc18457cb96388ee42667c254a13e2eb90c1f4d",
"pubkey": "662250ce4d037de109a64a6a0230f7899f922b76346388b3e7ca06fe9490358d",
"created_at": 1740586156,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/@briankrebs/114071054364893690",
"web"
],
[
"proxy",
"https://infosec.exchange/users/briankrebs/statuses/114071054364893690",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/briankrebs/statuses/114071054364893690",
"pink.momostr"
],
[
"-"
]
],
"content": "Interesting that the Russian news service Kommersant reported yesterday about a ransomware attack on a Russian company involving the Lockbit ransomware. The piece is light on details about how they determined it was lockbit, or what version (Lockbit's source and builders have been leaked over the years). \n\nThe story says the attack happened in December 2024, but I wonder if this was an isolated incident, and/or if someone is trying to sick the local authorities on Lockbit.\n\nhttps://archive.ph/To7oV",
"sig": "cb684074bb67aafe90e4a6b3d3de632a87c665209e4770a8e63250ead95af8e605d1b99e16bd87ee786e905807791df792b9d74259dbd75eab342cf5a8ed0ce3"
}