The Week in Ransomware - December 29th 2023 - LockBit targets hospitals

Weekly ransomware briefing: LockBit affiliates have increasingly targeted hospitals—disrupting emergency services and leaking/storing stolen data (including use of rented cloud storage at Wasabi), with other incidents reported against organizations like Yakult Australia and the Ohio Lottery. The report notes Microsoft disabling the MSIX ms-appinstaller protocol due to abuse by financially motivated groups, court actions by hospitals to recover stolen data, and the discovery of multiple new ransomware variants and extensions (.cdmx, .Tisak, .LIVE, .SNet, and 8base).