Dissecting LockBit v3 Ransomware
blog.calif.io
Dissecting LockBit v3 Ransomware
1–6 of 6 posts
Re: Dissecting LockBit v3 Ransomware
#2Thanks for sharing. I'm one of the co-authors of the blog post. Let me know if you have any questions!
tl;dr: We analyzed a LockBit v3 variant, and rediscovered a bug that allows us to decrypt some data without paying the ransom. We also found a design flaw that may cause permanent data loss. Nothing's earth-shattering, but it should be a fun read if you're into crypto and security!
Re: Dissecting LockBit v3 Ransomware
#3Thanks for sharing. I'm one of the co-authors of the blog post. Let me know if you have any questions! tl;dr: We analyzed a LockBit v3 variant, and rediscovered a bug that allows us to decrypt some data without paying the ransom. We also found a design flaw that may cause permanent data loss. Nothing's earth-shattering, but it should be a fun read if you're into crypto and security!
Respectfully, doesnt sharing this information ensure that whoever is behind LockBit can improve and fix it? Surely that isnt desirable?
Re: Dissecting LockBit v3 Ransomware
#4Thanks for sharing. I'm one of the co-authors of the blog post. Let me know if you have any questions! tl;dr: We analyzed a LockBit v3 variant, and rediscovered a bug that allows us to decrypt some data without paying the ransom. We also found a design flaw that may cause permanent data loss. Nothing's earth-shattering, but it should be a fun read if you're into crypto and security!
Respectfully, doesnt sharing this information ensure that whoever is behind LockBit can improve and fix it? Surely that isnt desirable?
From the article:
> The crypto bug is already known to the malware author. We have observed newer variants where we can no longer take advantage of this bug.
Re: Dissecting LockBit v3 Ransomware
#5Thanks for sharing. I'm one of the co-authors of the blog post. Let me know if you have any questions! tl;dr: We analyzed a LockBit v3 variant, and rediscovered a bug that allows us to decrypt some data without paying the ransom. We also found a design flaw that may cause permanent data loss. Nothing's earth-shattering, but it should be a fun read if you're into crypto and security!
Respectfully, doesnt sharing this information ensure that whoever is behind LockBit can improve and fix it? Surely that isnt desirable?
I think the first few paragraphs of the article explain why analysis is worthwhile pretty succinctly.
Re: Dissecting LockBit v3 Ransomware
#6I saw there is a decryption tools with the RSA decryption key.
How did they got those keys?