As expected, LockBit is back already
ID: 654ffdb0-f1ec-5b3a-b02c-e32c237dc4eb
STIX ID: report--654ffdb0-f1ec-5b3a-b02c-e32c237dc4eb
Feed Name: DataBreaches.Net
LockBit (LockBitSupp) reappeared after an international law-enforcement takedown, posting a PGP-signed statement admitting that a known PHP vulnerability likely allowed penetration of some of their servers; the actor claims most decryptors and stolen data remain protected and threatens continued data leaks (including re-listing Fulton County and other victims), describes operational changes to harden future builds, and highlights mirrored leak sites and affiliate recruitment despite the seizure.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
