S2W presents 'Dissecting the Arsenals of LockBit' at FIRSTCON24

Previously, we talked about S2W's presentation at the FIRST 2024 conference, and we are pleased to say it was delivered successfully today.🙌

HuiSeong Yang from S2W's Threat Intelligence Center (TALON) delivered a presentation titled "Dissecting the Arsenal of the LockBit Group," revealing their attack methods.

LockBit operates as a Ransomware-as-a-Service (RaaS), utilizing multiple affiliates to cause more damage than any other ransomware group. 

As of 2023, LockBit has attacked 1,118 out of 4,189 ransomware victims, constituting approximately 27% of all cases and ranking first in the number of victims among RaaS groups.

Given TALON's extensive analysis of LockBit since its inception, they provided a comprehensive analysis of LockBit during this presentation.

You can now check the presentation on S2W Medium blog.

 Based on data tracking LockBit’s evolution since 2019, common characteristics and significant changes across LockBit’s methods have been identified.

An in-depth look at LockBit’s dark web presence and recent issues, revealing what LockBit prioritizes and how these ideas are reflected in their tactics.

 Insights from a detailed analysis of LockBit ransomware versions and the LockBit builder.

🔎For more details on the analysis, please visit our Medium blog below.

🎙Discover more about S2W’s presentation here: