Alleged Builder of LockBit Black Ransomware Leaked

The report describes a newly created Twitter account that leaked an alleged LockBit 3.0 (LockBit Black) ransomware builder; analysis of the leaked archive shows a batch-driven builder (Build.bat → keygen.exe and builder.exe), a configurable config.json (encryption modes, exclusion lists, language checks, ransom note), and generated payloads that successfully encrypted and decrypted files. The authors warn the leak could enable new threat actors, outline the risk, and provide recommended mitigations such as secure backups, MFA, vulnerability management, user awareness, and darkweb monitoring.