Despite the ransomware known as LockBit has been known for a long time, some cybersecurity experts have raised the alarm about a new and dangerous variant.
Cristian Souzaspecialist in Kasperskyhas in fact described how a customized version is exploiting a self-diffusion function, making the malevolent agent even more fearsome than in the past. According to Souza, LockBit 3.0, released in 2022, has provided the opportunity for cybercriminals to create customized versions of ransomware, even if they are new to malware operations. hacking.
A Kaspersky report, analyzing the incident that revealed this new and fearsome variant, underlined how the customization represents a further obstacle for those involved in cybersecurity.
The new customized variant of LockBit is even more dangerous than the previous ones
The new version of LockBit, apparently, works disabling the security measures of the affected systems, as well as encrypt, share e cancel the information identified. Not only that: every infected computer can become a vector for spreading ransomware, making LockBit even more lethal than in the past.
Another feature of this malicious agent are the configuration files, modified by cybercriminals to make attacks even more effective. In fact, these offer further flexibility, with greater ease than in the past to evade defense systems.
The analysis carried out by Kaspersky highlighted how LockBit exploits a script known as SessionGopher. This allows attackers to steal passwords stored on infected computers with remarkable ease. Despite the great efforts of the police, therefore, the threat posed by LockBit continues to be concrete.
Kaspersky wanted to provide users with useful advice to avoid cyber disasters, both with regard to this ransomware and other similar attacks. In this sense, for the IT security company, the adoption of frequent backups and adequate defense tools represent an excellent basis on which to build an effective defensive strategy.