The Alleged LockBit Ransomware Mastermind Has Been Identified

LockBit, a ransomware-as-a-service operation that emerged in 2019, operated an affiliate model that produced roughly 7,000 unique "attack builds" and launched thousands of attacks against companies across the US, UK, France, Germany, China and other targets; investigators recovered affiliate data and found over 100 hospitals listed as victims despite internal rules. The report highlights the group's organizational structure, revenue-sharing with affiliates, growing brazenness and operational carelessness, and notes law enforcement monitoring of the marketplaces where affiliates operate.