{"id":20998,"date":"2024-05-26T06:53:04","date_gmt":"2024-05-26T06:53:04","guid":{"rendered":"https:\/\/www.stroople.com\/?p=20998"},"modified":"2025-03-09T15:51:47","modified_gmt":"2025-03-09T15:51:47","slug":"strategies-dattenuation-de-levolution-du-ransomware-lockbit","status":"publish","type":"post","link":"https:\/\/www.stroople.com\/fr\/lockbit-ransomware-evolution-mitigation-strategies\/","title":{"rendered":"Lockbit: de la gen\u00e8se au jugement dernier"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"20998\" class=\"elementor elementor-20998\" wpc-filter-elementor-widget=\"1\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-4cee5ce4 elementor-section-boxed elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"4cee5ce4\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-6575074a syd-sticky-section-no\" data-id=\"6575074a\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-60fc95bb syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"60fc95bb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\n<p class=\"wp-block-paragraph\">Lockbit: from Genesis to the Last Judgment<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-237aa61 elementor-section-items-stretch elementor-section-height-min-height elementor-section-content-middle elementor-section-stretched elementor-section-boxed elementor-section-height-default syd-sticky-section-no\" data-id=\"237aa61\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;stretch_section&quot;:&quot;section-stretched&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t\t<div class=\"elementor-background-overlay\"><\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-no\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-8322851 syd-sticky-section-no\" data-id=\"8322851\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-f3bf3e5 syd-sticky-section-no elementor-widget elementor-widget-heading\" data-id=\"f3bf3e5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Lockbit<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d9272c6 syd-sticky-section-no elementor-widget elementor-widget-heading\" data-id=\"d9272c6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">From Genesis to Doomsday<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-22f4239 elementor-widget-divider--view-line syd-sticky-section-no elementor-widget elementor-widget-divider\" data-id=\"22f4239\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"divider.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-divider\">\n\t\t\t<span class=\"elementor-divider-separator\">\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3597f18 elementor-align-center elementor-icon-list--layout-traditional elementor-list-item-link-full_width syd-sticky-section-no elementor-widget elementor-widget-icon-list\" data-id=\"3597f18\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<a href=\"#aboutus\">\n\n\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Scroll Down<\/span>\n\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-cb8dd0a elementor-section-stretched elementor-section-boxed elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"cb8dd0a\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;stretch_section&quot;:&quot;section-stretched&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-278276c syd-sticky-section-no\" data-id=\"278276c\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-0c4d08f syd-sticky-section-no elementor-widget elementor-widget-spacer\" data-id=\"0c4d08f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e9fe119 syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"e9fe119\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>A comprehensive overview of the Lockbit Saga: major ransomware, its evolutions, notable attacks, mitigation techniques, and international efforts to combat it.<\/p>\n<h2>From Creation to Chaos<\/h2>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-ef74782 elementor-section-boxed elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"ef74782\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-56261d3 syd-sticky-section-no\" data-id=\"56261d3\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-7251eee syd-sticky-section-no elementor-widget elementor-widget-image\" data-id=\"7251eee\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"300\" height=\"300\" src=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/Lockbit-pieuvre-300x300.png\" class=\"attachment-medium size-medium wp-image-21005\" alt=\"\" srcset=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/Lockbit-pieuvre-300x300.png 300w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/Lockbit-pieuvre-150x150.png 150w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/Lockbit-pieuvre-12x12.png 12w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/Lockbit-pieuvre-230x230.png 230w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/Lockbit-pieuvre-350x350.png 350w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/Lockbit-pieuvre-480x480.png 480w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/Lockbit-pieuvre.png 600w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-d24fcd8 syd-sticky-section-no\" data-id=\"d24fcd8\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-81dce03 syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"81dce03\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Lockbit first appeared on the cyber scene on September 3, 2019. Since its inception, Lockbit has carried out more than 2,000 attacks worldwide, making it one of the most prolific ransomware groups.<\/p>\n<p>The group has extorted over $120 millionThe group claims its members are from former Soviet Union republics, explaining their decision not to attack Russian interests or those of ex-USSR countries. Compared to its competitors, Lockbit is highly organized, resembling a startup. Its affiliate program even includes recommendations on which targets to avoid to stay under law enforcement radar, specifically sectors like healthcare, education, and oil.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<div class=\"elementor-element elementor-element-cdaf0c4 syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"cdaf0c4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Lockbit 2.0 to 3.0<\/h2>\n<p>Lockbit 2.0 first appeared in cybersecurity reports in early 2022. The group gradually deployed this new version, testing its features before a full-scale launch. Victims quickly accumulated, including well-known companies like TitanHQ and Travelex.<\/p>\n<p>In February 2022, law enforcement managed to infiltrate Lockbit&#8217;s systems and seize millions of dollars in ransom, forcing the group to temporarily suspend its activities. However, by March 2022, Lockbit resumed operations, launching a series of notable attacks. Lockbit 3.0 was released in May 2022, with significant improvements to avoid antivirus detection and introducing a function to delete backups.<\/p>\n<p>The ransomware evolved into Lockbit 2.0 and then Lockbit 3.0, with each version introducing more sophisticated evasion techniques and destructive capabilities, such as deleting backups to prevent data recovery.<\/p>\n<p>In September 2022, an internal disagreement led to the release of Lockbit 3.0&#8217;s source code on GitHub. According to Kaspersky, this leak resulted in the creation of over 400 variants of Lockbit 3.0 under the ransomware-as-a-service (RaaS) model, allowing other cybercriminals to use its malicious software for a commission. Initially known as &#8220;abcd&#8221; due to the extension added during data encryption, Lockbit quickly made a name for itself in cybercrime.<\/p>\n<h2>Modus Operandi<\/h2>\n<p><strong>1.Infection Methods<\/strong><\/p>\n<p>Lockbit uses a variety of methods to infiltrate its victims&#8217; computer systems, including :<\/p>\n<ul>\n<li style=\"list-style-type: none;\">\n<ul>\n<li>\n<p><strong>Phishing<\/strong>: Lockbit sends fraudulent emails to gather sensitive information. In February 2023, Lockbit used a sophisticated phishing campaign to infiltrate Royal Mail, resulting in a ransom demand of $80 million.<\/p>\n<\/li>\n<li>\n<p><strong>Exploitation of Security Flaws<\/strong>: Targeting outdated or unprotected systems. In 2022, Lockbit exploited a vulnerability in an enterprise&#8217;s RDP service to gain initial access and used tools like PsExec to move laterally across the network, encrypting data on multiple systems and demanding a substantial ransom.<\/p>\n<\/li>\n<li><strong>Malware Installation<\/strong>: Using backdoors for stealthy access. Recently, Lockbit used ConnectWise RMM software to penetrate the systems of several clients of a managed services provider, installing malicious versions of the software to establish persistence and exfiltrate data before deploying ransomware.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p><strong>2. Attack Phases<\/strong><\/p>\n<ul>\n<li style=\"list-style-type: none;\">\n<ul>\n<li>\n<p><strong>Exploitation<\/strong>: Using social engineering or brute force attacks to infiltrate a network and obtain VPN or RDP credentials.<\/p>\n<\/li>\n<li>\n<p><strong>Infiltration<\/strong>: Gaining elevated privileges and preparing for ransomware deployment. For example, in a 2023 attack, Lockbit used tools like Mimikatz to steal administrator credentials, allowing control over more systems.<\/p>\n<\/li>\n<li>\n<p><strong>Persistence<\/strong>: Maintaining access to the compromised network by enabling automatic logon or continually using compromised credentials.<\/p>\n<\/li>\n<li>\n<p><strong>Defense Evasion<\/strong>: Avoiding detection and disabling network defenses using tools like Defender Control to disable EDR processes and services or clearing event log files to hide traces.<\/p>\n<\/li>\n<li>\n<p><strong>Lateral Movement<\/strong>: Moving laterally within the compromised network using remote desktop software like Splashtop or targeting SMB shares with Cobalt Strike.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p><strong>3. Data Encryption<\/strong><\/p>\n<p>Once initial access is obtained, Lockbit affiliates execute malicious commands to deploy the ransomware, such as using batch scripts to execute malicious commands via the Windows Command Shell or using Chocolatey to deploy malicious software on infected systems.<\/p>\n<p>To maximize the impact of their attacks and make data access impossible, Lockbit affiliates use various destructive techniques:<\/p>\n<ul>\n<li style=\"list-style-type: none;\">\n<ul>\n<li><strong>Data Encryption<\/strong>: Encrypting data on target systems to disrupt their availability.<\/li>\n<li><strong>Internal Defacement<\/strong>: Changing the system&#8217;s wallpapers and icons to the Lockbit 3.0 branding.<\/li>\n<li><strong>System Recovery Inhibition<\/strong>: Deleting volume shadow copies to prevent data recovery.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p><strong>4. Ransom Demand<\/strong><\/p>\n<ul>\n<li style=\"list-style-type: none;\">\n<ul>\n<li>After encryption, Lockbit displays a ransom note demanding payment in cryptocurrency under the threat of data destruction or disclosure.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<ol>\n<li style=\"list-style-type: none;\">\u00a0<\/li>\n<\/ol>\n<h2>How to Protect Against Lockbit?<\/h2>\n<p>Organizations are encouraged to implement mitigation measures developed by CISA and NIST to strengthen their cybersecurity posture against Lockbit&#8217;s activities.<\/p>\n<ul>\n<li>\n<p><strong>Initial Access<\/strong>: Use sandboxed browsers, enforce strong password policies, utilize MFA, segment networks, and filter malicious emails.<\/p>\n<\/li>\n<li>\n<p><strong>Execution<\/strong>: Control network connections and enable advanced PowerShell logging.<\/p>\n<\/li>\n<li>\n<p><strong>Privilege Escalation<\/strong>: Restrict command-line activities and use Credential Guard.<\/p>\n<\/li>\n<li>\n<p><strong>Defense Evasion<\/strong>: Establish application whitelisting and enforce local security policies.<\/p>\n<\/li>\n<li>\n<p><strong>Credential Access<\/strong>: Limit NTLM usage with security policies.<\/p>\n<\/li>\n<li>\n<p><strong>Discovery<\/strong>: Disable unused ports.<\/p>\n<\/li>\n<li>\n<p><strong>Lateral Movement<\/strong>: Monitor network activities with surveillance tools.<\/p>\n<\/li>\n<li>\n<p><strong>Command and Control<\/strong>: Create trust zones for sensitive assets and adopt Zero Trust architecture for VPNs.<\/p>\n<\/li>\n<li>\n<p><strong>Exfiltration<\/strong>: Block connections to malicious systems with a TLS proxy and restrict access to public file-sharing services.<\/p>\n<\/li>\n<li><strong>Impact<\/strong>: Maintain multiple copies of sensitive data in secure locations and regularly update offline backups.<\/li>\n<li><strong>Security Controls Validation: <\/strong>Continuously test and validate your security program against MITRE ATT&amp;CK techniques to ensure optimal protection.<\/li>\n<\/ul>\n<h2>Cronos Operation<\/h2>\n<p>In February 2022, law enforcement took action and infiltrated Lockbit&#8217;s systems, seizing millions in ransom and forcing the group to suspend activities temporarily. Lockbit resumed attacks by March 2022, targeting prominent companies.<\/p>\n<p>The first arrests related to Lockbit began in October 2022 during Operation Cronos, conducted by authorities from 11 countries. In October 2022, Canadian authorities intercepted Mikhael Vasiliev, suspected of being a significant member of Lockbit, revealing his involvement in over a hundred attacks in France and links to other hacker groups like Blackcat, Ragnarlocker, and Darkside.<\/p>\n<p>In May 2023, the FBI offered a $10 million reward for information leading to the identification of Mikhail Pavlovich Matveev, alias &#8220;Wazawaka,&#8221; crucial in developing Lockbit&#8217;s ransomware. Despite these efforts, Lockbit remains defiant. In June 2023, seven international cybersecurity agencies published a guide to help companies defend against Lockbit.<\/p>\n<p>In February 2024, a major police operation led to the seizure of Lockbit&#8217;s infrastructure. This operation, the result of years of meticulous investigation by Europol, the NCA, and national authorities, involved collecting evidence, analyzing millions of financial transactions, and conducting complex surveillance operations to identify network members.<\/p>\n<p>The operation seized dozens of servers and over 200 cryptocurrency wallets. Authorities also obtained a thousand decryption keys, allowing the creation of decryption software freely available to Lockbit victims. Additionally, the source code and documents explaining the group&#8217;s expansion were discovered.<\/p>\n<h2>Lockbit\u2019s Reputation in Tatters?<\/h2>\n<p>In a dramatic turn for global cybersecurity, Operation Cronos dealt a significant blow to the criminal franchise LockBit by revealing approximately 190 affiliate accounts. This revelation comes from the cybersecurity intelligence firm Recorded Future and highlights the significant reduction in options for the gang. LockBit&#8217;s ability to rebound has been severely hampered largely due to the negative publicity surrounding the gang.<\/p>\n<p>By suggesting that LockbitSupp is now collaborating with law enforcement to reveal former partners, authorities have used an obvious attempt to nip any organizational recovery in the bud. This maneuver aims to deter any future association with LockbitSupp.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-84de100 syd-sticky-section-no elementor-widget elementor-widget-image\" data-id=\"84de100\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"1024\" height=\"471\" src=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/cronos-1024x471.jpeg\" class=\"attachment-large size-large wp-image-21009\" alt=\"\" srcset=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/cronos-1024x471.jpeg 1024w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/cronos-300x138.jpeg 300w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/cronos-768x353.jpeg 768w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/cronos-18x8.jpeg 18w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/cronos-1000x460.jpeg 1000w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/cronos-230x106.jpeg 230w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/cronos-350x161.jpeg 350w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/cronos-480x221.jpeg 480w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/cronos.jpeg 1059w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-362ab6b syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"362ab6b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>The police also took the liberty of mocking the ransomware gang by hijacking their data leak website.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8dbcb81 syd-sticky-section-no elementor-widget elementor-widget-image\" data-id=\"8dbcb81\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"1024\" height=\"434\" src=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/cronos2-1024x434.jpeg\" class=\"attachment-large size-large wp-image-21010\" alt=\"\" srcset=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/cronos2-1024x434.jpeg 1024w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/cronos2-300x127.jpeg 300w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/cronos2-768x326.jpeg 768w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/cronos2-18x8.jpeg 18w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/cronos2-1000x424.jpeg 1000w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/cronos2-230x98.jpeg 230w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/cronos2-350x148.jpeg 350w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/cronos2-480x204.jpeg 480w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/cronos2.jpeg 1200w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e370d00 syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"e370d00\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>But just a few weeks later, the hacker group Lockbit made a notable return on the dark web on February 24, 2024, mocking the efforts of the FBI and the international coalition. Lockbit announced that they had restored their servers and launched new Tor domains, already displaying five victims on their page and threatening to target more U.S. government sites.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4de2b74 syd-sticky-section-no elementor-widget elementor-widget-image\" data-id=\"4de2b74\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"582\" height=\"779\" src=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/cronos3.png\" class=\"attachment-large size-large wp-image-21011\" alt=\"\" srcset=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/cronos3.png 582w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/cronos3-224x300.png 224w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/cronos3-9x12.png 9w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/cronos3-230x308.png 230w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/cronos3-350x468.png 350w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/cronos3-480x642.png 480w\" sizes=\"(max-width: 582px) 100vw, 582px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-14094c1 syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"14094c1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>The Presumed Leader of LockBit Unmasked<\/h2>\n<p>In a statement released on Tuesday, May 7, 2024, the National Crime Agency (NCA), the UK&#8217;s national crime-fighting agency, revealed a series of details about LockBitSupp, the leader of the cybercriminals.<\/p>\n<p>Dmitry Yuryevich Khoroshev, a 31-year-old Russian national, has been identified by international authorities as the mastermind behind LockBit 3.0. Known by the alias LockBitSupp, he is now the target of a $10 million reward offered by the FBI and the U.S. Department of Justice for 26 charges. Dmitry Yuryevich Khoroshev is now subject to asset freezes and travel bans.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6f03853 syd-sticky-section-no elementor-widget elementor-widget-image\" data-id=\"6f03853\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"841\" height=\"1024\" src=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/Wanted-Cronos-841x1024.png\" class=\"attachment-large size-large wp-image-21012\" alt=\"\" srcset=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/Wanted-Cronos-841x1024.png 841w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/Wanted-Cronos-247x300.png 247w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/Wanted-Cronos-768x935.png 768w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/Wanted-Cronos-10x12.png 10w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/Wanted-Cronos-1000x1217.png 1000w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/Wanted-Cronos-230x280.png 230w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/Wanted-Cronos-350x426.png 350w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/Wanted-Cronos-480x584.png 480w, https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/Wanted-Cronos.png 1088w\" sizes=\"(max-width: 841px) 100vw, 841px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4c8ade6 syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"4c8ade6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"flex flex-grow flex-col max-w-full\">\n<div class=\"min-h-[20px] text-message flex flex-col items-start whitespace-pre-wrap break-words [.text-message+&amp;]:mt-5 juice:w-full juice:items-end overflow-x-auto gap-2\" dir=\"auto\" data-message-author-role=\"assistant\" data-message-id=\"fd7cc65b-57ad-47cb-b215-379818841a0c\">\n<div class=\"flex w-full flex-col gap-1 juice:empty:hidden juice:first:pt-[3px]\">\n<div class=\"markdown prose w-full break-words dark:prose-invert light\">\n<p>This latest episode not only highlights the alleged identity of the LockBit operator but also the small number of cybercriminals who actually profit from these malicious activities.<\/p>\n<p>According to information from Operation Cronos, out of the 114 affiliates listed within the LockBit infrastructure before its interruption, only 80 managed to generate revenue. The majority of cybercriminals did not gain any financial benefit from their actions.<\/p>\n<p>With approximately 7,000 documented attacks between June 2022 and February 2024, and only 178 victims engaging in negotiations, most ransomware attempts failed to extort payment.<\/p>\n<p>This revelation comes after a series of recent cyberattacks by Lockbit, including the attack on April 16, 2024, against the Cannes hospital, which led to the disclosure of 61 gigabytes of confidential patient data.<\/p>\n<h2>Lockbit: State of the Threat<\/h2>\n<p>Authorities continue to closely monitor the activities within this cybercriminal network.<\/p>\n<p>Operation Cronos, despite being criticized for its lack of discretion and limited effectiveness against the group, has nonetheless succeeded in reducing the average number of monthly Lockbit attacks in the UK by 73% since February. The NCA states that Lockbit is currently operating at limited capacity, although the group is attempting to rebuild.<\/p>\n<p>International authorities continue to target Lockbit affiliates responsible for attacks on schools, hospitals, and large enterprises. The effectiveness of these measures remains to be seen, especially with the approach of the Paris 2024 Olympics. International cooperation and information sharing between public and private actors remain essential to effectively counter this threat.<\/p>\n<p>The next phase of this battle will unfold in the near future..<\/p>\n<p>\u00a0<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d8c63f0 syd-sticky-section-no elementor-widget elementor-widget-testimonial\" data-id=\"d8c63f0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"testimonial.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-testimonial-wrapper\">\n\t\t\t\n\t\t\t\t\t\t<div class=\"elementor-testimonial-meta elementor-has-image elementor-testimonial-image-position-aside\">\n\t\t\t\t<div class=\"elementor-testimonial-meta-inner\">\n\t\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-testimonial-image\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"1394\" height=\"1511\" src=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/09\/JFS.jpg\" class=\"attachment-full size-full wp-image-19214\" alt=\"\" srcset=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/09\/JFS.jpg 1394w, https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/09\/JFS-277x300.jpg 277w, https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/09\/JFS-945x1024.jpg 945w, https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/09\/JFS-768x832.jpg 768w, https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/09\/JFS-11x12.jpg 11w, https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/09\/JFS-1000x1084.jpg 1000w, https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/09\/JFS-230x249.jpg 230w, https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/09\/JFS-350x379.jpg 350w, https:\/\/www.stroople.com\/wp-content\/uploads\/2023\/09\/JFS-480x520.jpg 480w\" sizes=\"(max-width: 1394px) 100vw, 1394px\" \/>\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-testimonial-details\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-testimonial-name\">Jean-Fran\u00e7ois SCHOONHEERE<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-testimonial-job\">CEO &amp; founder Stroople<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e22f6f8 elementor-align-center syd-sticky-section-no elementor-widget elementor-widget-button\" data-id=\"e22f6f8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"https:\/\/www.linkedin.com\/newsletters\/7120442855684231170\/?displayConfirmation=true\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Subscribe on LinkedIn<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c40f649 syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"c40f649\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong>Sources :<\/strong><\/p>\n<p><a href=\"https:\/\/www.justice.gov\/opa\/pr\/us-and-uk-disrupt-lockbit-ransomware-variant\" target=\"_blank\" rel=\"noopener noreferrer\">Justice.gov<\/a><\/p>\n<p><a href=\"https:\/\/techcrunch.com\/2024\/02\/20\/lockbit-sanctions-ransomware-takedown\/\" target=\"_blank\" rel=\"noopener noreferrer\">TechCrunch<\/a><\/p>\n<p><a href=\"https:\/\/www.blackfog.com\/lockbit-attacks-2024\/\" target=\"_blank\" rel=\"noopener noreferrer\">BlackFog<\/a><\/p>\n<p><a href=\"https:\/\/www.kaspersky.com\/\" target=\"_blank\" rel=\"noopener noreferrer\">Kaspersky<\/a><\/p>\n<p><a href=\"https:\/\/www.cyfirma.com\/\" target=\"_blank\" rel=\"noopener noreferrer\">CYFIRMA Report on SamsStealer<\/a><\/p>\n<p><a href=\"https:\/\/www.rapid7.com\/\" target=\"_blank\" rel=\"noopener noreferrer\">Rapid7<\/a><\/p>\n<p><a href=\"https:\/\/www.europol.europa.eu\/\" target=\"_blank\" rel=\"noopener noreferrer\">Europol<\/a><\/p>\n<p><a href=\"https:\/\/www.fbi.gov\/\" target=\"_blank\" rel=\"noopener noreferrer\">FBI<\/a><\/p>\n<p><a href=\"https:\/\/www.nationalcrimeagency.gov.uk\/\" target=\"_blank\" rel=\"noopener noreferrer\">National Crime Agency (NCA)<\/a><\/p>\n<p><a href=\"https:\/\/techhq.com\/\" target=\"_blank\" rel=\"noopener noreferrer\">TechHQ<\/a><\/p>\n<p><a href=\"https:\/\/newscenter.com\/\" target=\"_blank\" rel=\"noopener noreferrer\">Newscenter<\/a><\/p>\n<p><a href=\"https:\/\/www.wired.com\/\" target=\"_blank\" rel=\"noopener noreferrer\">Wired<\/a><\/p>\n<p><a href=\"https:\/\/blogs.manageengine.com\/corporate\/general\/2024\/01\/22\/navigating-the-threat-landscape-of-lockbit.html\" target=\"_blank\" rel=\"noopener noreferrer\">ManageEngine Blog<\/a><\/p>\n<p><a href=\"https:\/\/www.securityweek.com\/us-government-warns-organizations-of-lockbit-3-0-ransomware-attacks\/\" target=\"_blank\" rel=\"noopener noreferrer\">SecurityWeek<\/a><\/p>\n<p><a href=\"https:\/\/securityboulevard.com\/2023\/09\/lockbit-affiliates-use-rmm-software-in-ransomware-attacks\/\" target=\"_blank\" rel=\"noopener noreferrer\">Security Boulevard<\/a><\/p>\n<p><a href=\"https:\/\/blogs.manageengine.com\/corporate\/general\/2024\/01\/22\/navigating-the-threat-landscape-of-lockbit.html\" target=\"_blank\" rel=\"noopener noreferrer\">ManageEngine Blog<\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Lockbit: from Genesis to the Last Judgment Lockbit From Genesis to Doomsday Scroll Down A comprehensive overview of the Lockbit Saga: major [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":20999,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[114],"tags":[],"class_list":["post-20998","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security-operations-soc-detection"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Lockbit : From Genesis to Doomsday - Stroople<\/title>\n<meta name=\"description\" content=\"Explore the evolution of Lockbit ransomware, its notorious attacks, and effective mitigation strategies. Learn about international efforts to combat this cyber threat and protect your business from similar ransomware attacks.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.stroople.com\/fr\/strategies-dattenuation-de-levolution-du-ransomware-lockbit\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Lockbit : From Genesis to Doomsday - Stroople\" \/>\n<meta property=\"og:description\" content=\"Explore the evolution of Lockbit ransomware, its notorious attacks, and effective mitigation strategies. Learn about international efforts to combat this cyber threat and protect your business from similar ransomware attacks.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.stroople.com\/fr\/strategies-dattenuation-de-levolution-du-ransomware-lockbit\/\" \/>\n<meta property=\"og:site_name\" content=\"Stroople\" \/>\n<meta property=\"article:published_time\" content=\"2024-05-26T06:53:04+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-03-09T15:51:47+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/Lockbit-ransomware.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"750\" \/>\n\t<meta property=\"og:image:height\" content=\"400\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"STROOPLEADMINISTRATOR\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@Stroople1\" \/>\n<meta name=\"twitter:site\" content=\"@Stroople1\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"STROOPLEADMINISTRATOR\" \/>\n\t<meta name=\"twitter:label2\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data2\" content=\"10 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/lockbit-ransomware-evolution-mitigation-strategies\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/lockbit-ransomware-evolution-mitigation-strategies\\\/\"},\"author\":{\"name\":\"STROOPLEADMINISTRATOR\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#\\\/schema\\\/person\\\/a1eb93cbbffe1681999993af123a6d44\"},\"headline\":\"Lockbit : From Genesis to Doomsday\",\"datePublished\":\"2024-05-26T06:53:04+00:00\",\"dateModified\":\"2025-03-09T15:51:47+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/lockbit-ransomware-evolution-mitigation-strategies\\\/\"},\"wordCount\":1611,\"publisher\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/lockbit-ransomware-evolution-mitigation-strategies\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.stroople.com\\\/wp-content\\\/uploads\\\/2024\\\/05\\\/Lockbit-ransomware.jpg\",\"articleSection\":[\"SecOps\"],\"inLanguage\":\"fr-FR\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/lockbit-ransomware-evolution-mitigation-strategies\\\/\",\"url\":\"https:\\\/\\\/www.stroople.com\\\/lockbit-ransomware-evolution-mitigation-strategies\\\/\",\"name\":\"Lockbit : From Genesis to Doomsday - Stroople\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/lockbit-ransomware-evolution-mitigation-strategies\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/lockbit-ransomware-evolution-mitigation-strategies\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.stroople.com\\\/wp-content\\\/uploads\\\/2024\\\/05\\\/Lockbit-ransomware.jpg\",\"datePublished\":\"2024-05-26T06:53:04+00:00\",\"dateModified\":\"2025-03-09T15:51:47+00:00\",\"description\":\"Explore the evolution of Lockbit ransomware, its notorious attacks, and effective mitigation strategies. Learn about international efforts to combat this cyber threat and protect your business from similar ransomware attacks.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/lockbit-ransomware-evolution-mitigation-strategies\\\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.stroople.com\\\/lockbit-ransomware-evolution-mitigation-strategies\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/lockbit-ransomware-evolution-mitigation-strategies\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.stroople.com\\\/wp-content\\\/uploads\\\/2024\\\/05\\\/Lockbit-ransomware.jpg\",\"contentUrl\":\"https:\\\/\\\/www.stroople.com\\\/wp-content\\\/uploads\\\/2024\\\/05\\\/Lockbit-ransomware.jpg\",\"width\":750,\"height\":400},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/lockbit-ransomware-evolution-mitigation-strategies\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/www.stroople.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Lockbit : From Genesis to Doomsday\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#website\",\"url\":\"https:\\\/\\\/www.stroople.com\\\/\",\"name\":\"Stroople\",\"description\":\"Cybersecurity Expertise\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.stroople.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#organization\",\"name\":\"Stroople Cybersecurity\",\"alternateName\":\"Stroople\",\"url\":\"https:\\\/\\\/www.stroople.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.stroople.com\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/Logo-Stroople-responsive.png\",\"contentUrl\":\"https:\\\/\\\/www.stroople.com\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/Logo-Stroople-responsive.png\",\"width\":1000,\"height\":1000,\"caption\":\"Stroople Cybersecurity\"},\"image\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/Stroople1\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/stroople\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UC_kTnaswN04kjIrHU0Pi_qg\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#\\\/schema\\\/person\\\/a1eb93cbbffe1681999993af123a6d44\",\"name\":\"STROOPLEADMINISTRATOR\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/cf565399cf069755c53f17b9c363d364247d5ad1c1bc3bc3ff3b9ff928b80411?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/cf565399cf069755c53f17b9c363d364247d5ad1c1bc3bc3ff3b9ff928b80411?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/cf565399cf069755c53f17b9c363d364247d5ad1c1bc3bc3ff3b9ff928b80411?s=96&d=mm&r=g\",\"caption\":\"STROOPLEADMINISTRATOR\"},\"sameAs\":[\"https:\\\/\\\/stroople.com\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Lockbit: de la gen\u00e8se au jugement dernier - Stroople","description":"Explorez l'\u00e9volution du ransomware Lockbit, ses attaques notoires et les strat\u00e9gies de mitigation efficaces. D\u00e9couvrez les efforts internationaux pour combattre cette menace cybern\u00e9tique et prot\u00e9ger votre entreprise contre des attaques similaires de ransomware.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.stroople.com\/fr\/strategies-dattenuation-de-levolution-du-ransomware-lockbit\/","og_locale":"fr_FR","og_type":"article","og_title":"Lockbit : From Genesis to Doomsday - Stroople","og_description":"Explore the evolution of Lockbit ransomware, its notorious attacks, and effective mitigation strategies. Learn about international efforts to combat this cyber threat and protect your business from similar ransomware attacks.","og_url":"https:\/\/www.stroople.com\/fr\/strategies-dattenuation-de-levolution-du-ransomware-lockbit\/","og_site_name":"Stroople","article_published_time":"2024-05-26T06:53:04+00:00","article_modified_time":"2025-03-09T15:51:47+00:00","og_image":[{"width":750,"height":400,"url":"https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/Lockbit-ransomware.jpg","type":"image\/jpeg"}],"author":"STROOPLEADMINISTRATOR","twitter_card":"summary_large_image","twitter_creator":"@Stroople1","twitter_site":"@Stroople1","twitter_misc":{"\u00c9crit par":"STROOPLEADMINISTRATOR","Dur\u00e9e de lecture estim\u00e9e":"10 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.stroople.com\/lockbit-ransomware-evolution-mitigation-strategies\/#article","isPartOf":{"@id":"https:\/\/www.stroople.com\/lockbit-ransomware-evolution-mitigation-strategies\/"},"author":{"name":"STROOPLEADMINISTRATOR","@id":"https:\/\/www.stroople.com\/#\/schema\/person\/a1eb93cbbffe1681999993af123a6d44"},"headline":"Lockbit : From Genesis to Doomsday","datePublished":"2024-05-26T06:53:04+00:00","dateModified":"2025-03-09T15:51:47+00:00","mainEntityOfPage":{"@id":"https:\/\/www.stroople.com\/lockbit-ransomware-evolution-mitigation-strategies\/"},"wordCount":1611,"publisher":{"@id":"https:\/\/www.stroople.com\/#organization"},"image":{"@id":"https:\/\/www.stroople.com\/lockbit-ransomware-evolution-mitigation-strategies\/#primaryimage"},"thumbnailUrl":"https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/Lockbit-ransomware.jpg","articleSection":["SecOps"],"inLanguage":"fr-FR"},{"@type":"WebPage","@id":"https:\/\/www.stroople.com\/lockbit-ransomware-evolution-mitigation-strategies\/","url":"https:\/\/www.stroople.com\/lockbit-ransomware-evolution-mitigation-strategies\/","name":"Lockbit: de la gen\u00e8se au jugement dernier - Stroople","isPartOf":{"@id":"https:\/\/www.stroople.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.stroople.com\/lockbit-ransomware-evolution-mitigation-strategies\/#primaryimage"},"image":{"@id":"https:\/\/www.stroople.com\/lockbit-ransomware-evolution-mitigation-strategies\/#primaryimage"},"thumbnailUrl":"https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/Lockbit-ransomware.jpg","datePublished":"2024-05-26T06:53:04+00:00","dateModified":"2025-03-09T15:51:47+00:00","description":"Explorez l'\u00e9volution du ransomware Lockbit, ses attaques notoires et les strat\u00e9gies de mitigation efficaces. D\u00e9couvrez les efforts internationaux pour combattre cette menace cybern\u00e9tique et prot\u00e9ger votre entreprise contre des attaques similaires de ransomware.","breadcrumb":{"@id":"https:\/\/www.stroople.com\/lockbit-ransomware-evolution-mitigation-strategies\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.stroople.com\/lockbit-ransomware-evolution-mitigation-strategies\/"]}]},{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/www.stroople.com\/lockbit-ransomware-evolution-mitigation-strategies\/#primaryimage","url":"https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/Lockbit-ransomware.jpg","contentUrl":"https:\/\/www.stroople.com\/wp-content\/uploads\/2024\/05\/Lockbit-ransomware.jpg","width":750,"height":400},{"@type":"BreadcrumbList","@id":"https:\/\/www.stroople.com\/lockbit-ransomware-evolution-mitigation-strategies\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.stroople.com\/"},{"@type":"ListItem","position":2,"name":"Lockbit : From Genesis to Doomsday"}]},{"@type":"WebSite","@id":"https:\/\/www.stroople.com\/#website","url":"https:\/\/www.stroople.com\/","name":"Stroople","description":"Expertise en cybers\u00e9curit\u00e9","publisher":{"@id":"https:\/\/www.stroople.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.stroople.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Organization","@id":"https:\/\/www.stroople.com\/#organization","name":"Stroople Cybers\u00e9curit\u00e9","alternateName":"Stroople","url":"https:\/\/www.stroople.com\/","logo":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/www.stroople.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.stroople.com\/wp-content\/uploads\/2026\/05\/Logo-Stroople-responsive.png","contentUrl":"https:\/\/www.stroople.com\/wp-content\/uploads\/2026\/05\/Logo-Stroople-responsive.png","width":1000,"height":1000,"caption":"Stroople Cybersecurity"},"image":{"@id":"https:\/\/www.stroople.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/Stroople1","https:\/\/www.linkedin.com\/company\/stroople\/","https:\/\/www.youtube.com\/channel\/UC_kTnaswN04kjIrHU0Pi_qg"]},{"@type":"Person","@id":"https:\/\/www.stroople.com\/#\/schema\/person\/a1eb93cbbffe1681999993af123a6d44","name":"STROOPLEADMINISTRATEUR","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/secure.gravatar.com\/avatar\/cf565399cf069755c53f17b9c363d364247d5ad1c1bc3bc3ff3b9ff928b80411?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/cf565399cf069755c53f17b9c363d364247d5ad1c1bc3bc3ff3b9ff928b80411?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/cf565399cf069755c53f17b9c363d364247d5ad1c1bc3bc3ff3b9ff928b80411?s=96&d=mm&r=g","caption":"STROOPLEADMINISTRATOR"},"sameAs":["https:\/\/stroople.com"]}]}},"_links":{"self":[{"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/posts\/20998","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/comments?post=20998"}],"version-history":[{"count":0,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/posts\/20998\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/media\/20999"}],"wp:attachment":[{"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/media?parent=20998"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/categories?post=20998"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/tags?post=20998"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}