The infamous Russia-backed LockBit ransomware group has been identified as potential culprits behind the recent cyber-incident involving the UK's postal service.
On January 11, 2023, while Royal Mail’s international deliveries were severely disrupted because of a “cyber-incident,” printers at a distribution site of the UK’s postal service in Belfast, Northern Ireland, started printing ransom notes.
The note, first reported by The Telegraph, was headlined “Lockbit Black Ransomware. Your data are stolen and encrypted”.
LockBit is a prolific Russia-backed ransomware group that was recently in the spotlight for hacking Toronto’s Hospital for Sick Children (SickKids) in December 2022 before apologizing and handing back the decryptor, key free of charge.
Black Encryptor, Part of LockBit 3.0
The LockBit ‘Black’ ransomware is the latest version of the threat actor’s encryptor, launched in June 2022 and including code used by the defunct Black Matter ransomware group, Rik Ferguson, security researcher and VP of security intelligence at Forescout, noted on Twitter.
No tags.
