{"id":14489,"date":"2024-02-27T11:01:56","date_gmt":"2024-02-27T11:01:56","guid":{"rendered":"http:\/\/TheNextWeb=1404269"},"modified":"2024-02-27T11:01:56","modified_gmt":"2024-02-27T11:01:56","slug":"russia-linked-lockbit-hackers-re-emerge-pledge-to-vote-for-trump","status":"publish","type":"post","link":"https:\/\/www.londonchiropracter.com\/?p=14489","title":{"rendered":"Russia-linked LockBit hackers re-emerge, pledge to vote for Trump"},"content":{"rendered":"\n<p>Cybercrime cops still celebrating the takedown of LockBit&nbsp;should put the champagne back on ice because the Russia-linked hackers have re-emerged \u2014 and declared support for Donald Trump.<\/p>\n<p>Often described as the \u201cworld\u2019s most active ransomware group,\u201d LockBit was disrupted <a href=\"https:\/\/thenextweb.com\/news\/cybercrime-group-catches-ransomware-group-lockbit\" target=\"_blank\" rel=\"noopener\">last Tuesday<\/a> by an international coalition of law enforcement agencies.<\/p>\n<p><span>According to Europol, the task force infiltrated&nbsp;the gang\u2019s \u201cprimary platform and critical infrastructure.\u201d Members of LockBit were also arrested and charged. Britain\u2019s National Crime Agency said the sting had compromised \u201ctheir entire criminal enterprise.\u201d<\/span><\/p>\n<p>But less than a week later, LockBit has reemerged on the Dark Web. On a new site, the gang shared an apparent list of corporate victims, an explanation for the takedown \u2014 and that dubious endorsement of Trump.<\/p>\n<div class=\"inarticle-wrapper latest channel-cta hs-embed-tnw\">\n<div id=\"hs-embed-tnw\" class=\"channel-cta-wrapper\" readability=\"8.5\">\n<div class=\"channel-cta-img\"><img decoding=\"async\" class=\"js-lazy\" src=\"https:\/\/s3.amazonaws.com\/events.tnw\/hardfork-2018\/uploads\/visuals\/tnw-newsletter.png\"><\/div>\n<p><noscript><img decoding=\"async\" src=\"https:\/\/s3.amazonaws.com\/events.tnw\/hardfork-2018\/uploads\/visuals\/tnw-newsletter.png\"><\/noscript><\/p>\n<div class=\"channel-cta-input\" readability=\"12\">\n<p class=\"channel-cta-title\">The &lt;3 of EU tech<\/p>\n<p class=\"channel-cta-tagline\">The latest rumblings from the EU tech scene, a story from our wise ol&#8217; founder Boris, and some questionable AI art. It&#8217;s free, every week, in your inbox. Sign up now!<\/p>\n<\/div>\n<\/div>\n<\/div>\n<p>In a <a href=\"https:\/\/twitter.com\/vxunderground\/status\/1761506370656825531\" target=\"_blank\" rel=\"nofollow noopener\">lengthy message<\/a> posted on Monday, the group\u2019s presumptive leader blamed their \u201cpersonal negligence and irresponsibility\u201d for the takedown.<\/p>\n<p>They also said the bust was triggered by the <a href=\"https:\/\/krebsonsecurity.com\/2024\/02\/fbis-lockbit-takedown-postponed-a-ticking-time-bomb-in-fulton-county-ga\/\" target=\"_blank\" rel=\"nofollow noopener\">recent theft of data<\/a> from government systems in Fulton County, Georgia.<\/p>\n<p>\u201cThe stolen documents contain a lot of interesting things and Donald Trump\u2019s court cases that could affect the upcoming US election,\u201d the message claimed.<\/p>\n<p>Then came the suspicious political declaration:<\/p>\n<p>\u201cPersonally I will vote for Trump,\u201d they said.<\/p>\n<p><a href=\"https:\/\/thenextweb.com\/topic\/cybersecurity\" target=\"_blank\" rel=\"noopener\">Cybersecurity<\/a> experts, however, doubt that LockBit\u2019s leader is a US citizen. Nonetheless, they\u2019re extremely concerned about the group\u2019s return.<\/p>\n<h2>What\u2019s next for LockBit?<\/h2>\n<figure class=\"post-image post-mediaBleed aligncenter\"><img decoding=\"async\" loading=\"lazy\" class=\"size-full wp-image-1404089 js-lazy\" src=\"https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2024\/02\/Untitled-design-5.jpeg\" alt=\"Graphic of the cybercrime agencies who have taken down Lockbit\" width=\"1280\" height=\"720\" sizes=\"(max-width: 1280px) 100vw, 1280px\" data-srcset=\"https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2024\/02\/Untitled-design-5.jpeg 1280w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2024\/02\/Untitled-design-5-280x158.jpeg 280w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2024\/02\/Untitled-design-5-240x135.jpeg 240w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2024\/02\/Untitled-design-5-480x270.jpeg 480w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2024\/02\/Untitled-design-5-796x448.jpeg 796w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2024\/02\/Untitled-design-5-1200x675.jpeg 1200w\"><figcaption>Credit: NSA<\/figcaption><figcaption><a href=\"https:\/\/thenextweb.com\/news\/lockbit-ransomware-group-returns-supports-trump#\" data-url=\"https:\/\/twitter.com\/intent\/tweet?url=https%3A%2F%2Feditorial.thenextweb.com%2Fdata-security%2F2024%2F02%2F27%2Flockbit-ransomware-group-returns-supports-trump%2F&amp;via=thenextweb&amp;related=thenextweb&amp;text=Check out this picture on: The takedown of LockBit doesn\u2019t spell doom for the gang. Credit: NCA\" data-title=\"Share The takedown of LockBit doesn\u2019t spell doom for the gang. Credit: NCA on Twitter\" data-width=\"685\" data-height=\"500\" class=\"post-image-share popitup\" title=\"Share The takedown of LockBit doesn\u2019t spell doom for the gang. Credit: NCA on Twitter\"><i class=\"icon icon--inline icon--twitter--dark\"><\/i><\/a>The takedown of LockBit doesn\u2019t spell doom for the gang. Credit: NCA<\/figcaption><noscript><img decoding=\"async\" loading=\"lazy\" class=\"size-full wp-image-1404089\" src=\"https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2024\/02\/Untitled-design-5.jpeg\" alt=\"Graphic of the cybercrime agencies who have taken down Lockbit\" width=\"1280\" height=\"720\" srcset=\"https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2024\/02\/Untitled-design-5.jpeg 1280w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2024\/02\/Untitled-design-5-280x158.jpeg 280w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2024\/02\/Untitled-design-5-240x135.jpeg 240w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2024\/02\/Untitled-design-5-480x270.jpeg 480w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2024\/02\/Untitled-design-5-796x448.jpeg 796w, https:\/\/cdn0.tnwcdn.com\/wp-content\/blogs.dir\/1\/files\/2024\/02\/Untitled-design-5-1200x675.jpeg 1200w\"><\/noscript><\/figure>\n<p>Analysts have spotted clear signs of LockBit resuming operations.<\/p>\n<p><a href=\"https:\/\/www.linkedin.com\/in\/tim-geschwindt-ab023893\/\" target=\"_blank\" rel=\"nofollow noopener\">Tim Geschwindt<\/a>, a senior associate on the cyber incident response team at security consultancy <a href=\"https:\/\/www.s-rminform.com\/\" target=\"_blank\" rel=\"nofollow noopener\">S-RM<\/a>, said the <a href=\"https:\/\/thenextweb.com\/topic\/hacker\" target=\"_blank\" rel=\"noopener\">hackers<\/a>&nbsp;recovered their infrastructure over the weekend. To this, they used backup servers that weren\u2019t compromised during last week\u2019s takedown.<\/p>\n<p>With the gang again open for business, LockBit affiliates are now returning to work. Several new incidents have been reported over the last 24-48 hours, Geschwindt said, while fresh victims are appearing on new sites.<\/p>\n<p>\u201cWe expect LockBit are likely to return to pre-takedown levels of attack volume; however, it may take several weeks before they iron out issues with the new infrastructure, and ramp up their activity,\u201d Geschwindt told TNW.<\/p>\n<p>\u201cUltimately, despite several large takedowns in 2023 and early 2024, we have not seen a major dent in the number of global ransomware attacks or ransom payments.\u201d<\/p>\n<p> <a href=\"https:\/\/thenextweb.com\/news\/lockbit-ransomware-group-returns-supports-trump\">Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Cybercrime cops still celebrating the takedown of LockBit&nbsp;should put the champagne back on ice because the Russia-linked hackers have re-emerged \u2014 and declared support for Donald Trump. Often described as the \u201cworld\u2019s&#8230;<\/p>\n","protected":false},"author":1,"featured_media":14490,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/www.londonchiropracter.com\/index.php?rest_route=\/wp\/v2\/posts\/14489"}],"collection":[{"href":"https:\/\/www.londonchiropracter.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.londonchiropracter.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.londonchiropracter.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.londonchiropracter.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=14489"}],"version-history":[{"count":0,"href":"https:\/\/www.londonchiropracter.com\/index.php?rest_route=\/wp\/v2\/posts\/14489\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.londonchiropracter.com\/index.php?rest_route=\/wp\/v2\/media\/14490"}],"wp:attachment":[{"href":"https:\/\/www.londonchiropracter.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=14489"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.londonchiropracter.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=14489"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.londonchiropracter.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=14489"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}