LockBit ransomware

Published: 27th Apr, 2023

Context

Cybercriminals have developed new ransomware encryptors designed to target macOS devices, making this the first major ransomware operation to specifically target Apple computers.

What is LockBit ransomware?

First reported in September 2019 and dubbed the “abcd” virus, due to the file extension used when encrypting victim’s files, the LockBit ransomware is designed to infiltrate victims’ systems and encrypt important files.
The virus is categorised as a “crypto virus” due to its requests for payment in cryptocurrency to decrypt the files on the victim’s device.
The ransomware is therefore typically deployed against victims who feel hindered enough by the disruption to pay heavy sums in exchange for access and can afford to do so.

LockBit ransomware gang

The group behind this is known as the LockBit gang. It is considered the most prolific ransomware group ever.
It operates on the ransomware-as-a-service (Raas) model and comes from a line of extortion cyberattacks.

Target: Historically, ransomware has targeted Windows, Linux, and VMware ESXi servers. However, the LockBit is now working to create encryptors targeting Macs for the first time.
It works as a self-spreading malware, not requiring additional instructions once it has successfully infiltrated a single device with access to an organisational intranet.
Protection: While there are no fool-proof ways of protecting against ransomware attacks, organisations and individuals can take certain steps to increase resilience against such cyber threats.

CURRENT AFFAIRS FOR UPSC IAS

LockBit ransomware