This week has been a busy one for the LockBit gang. In the last 7 days they posted 23 new breaches on their website.
Some of the victims include:
- crossinggroup.com – A construction company based in Alberta, Canada
- gruppomercurio.com – A vehicle transportation company, based in Italy
- wsisd.net – A school district in Texas, USA
- worldlearning.org – An international organisation focussing on international development & education, based in Vermont, Canada
- Realcomp.com – A company specialising in Real Estate data services in Michigan, USA
- screenline.co.za – A screen advertising manufacturer, based in Johannesburg, South Africa
- Pittsburg.k12.ca.us – Pittsburg Unified School District, California, USA
- pentechsolution.com.my – An IT solutions company in Mayasia
- birdair.com – A specialist tensile fabric manufacturer, based in New York, USA
- mariohernandez.com.co – A columbian fashion house, based in Bogota, Columbia
- Payday.com.pa – A payroll processing company based in San Francisco, USA
- dalvikurbyggd.is – A municipality in Iceland
- trois-i.com – An investments company based in Luxembourg
- bintangindokaryagemilang.co.id – A footwear manufacturer producing Adidas merchanise, based on the Island of Java
As can been seen from the random types of organisations targeted by the gang, they don’t have any particular industry vertical in mind when they attack – they just go for whatever weakness they can find.
LockBit are certainly one of the most capable of all the ransomware gangs operating at the moment, and from the looks of things, show no signs of slowing down their operations.