LockBit Now Encrypts Windows Domains Using Group Policies

This article has been indexed from Softpedia News / Security

Researchers found a new strain of LockBit ransomware that automates the encrypting of Windows domains by leveraging Active Directory group policies, according to Bleeping Computer.

The LockBit ransomware campaign began in September 2019 as a service-by-service ransomware scheme in which threat actors are tasked with infiltrating networks and encrypting devices. In exchange, the employed affiliates pay 70-80% of the total amount, with the remaining 20% going to the LockBit founders.

A spokesperson for the gang promotes the ransomware operation and provides support to hacker web forums. Following the banning of Ransomware concerns on hacking forums, LockBit began pushing a new ransomware-by-service, LockBit 2.0, on its data leak site. 

There is a multitude of features supported by LockBit 2.0, many of which have alre…

Read the original article: LockBit Now Encrypts Windows Domains Using Group Policies