"US and International Partners Release Comprehensive Cyber Advisory on LockBit Ransomware"
"Understanding Ransomware Threat Actors: LockBit" is the title of a joint Cybersecurity Advisory (CSA) issued by the US Cybersecurity and Infrastructure Security Agency (CISA), FBI, Multi-State Information Sharing and Analysis Center (MS-ISAC), and the cybersecurity authorities of Australia, Canada, the UK, Germany, France, and New Zealand (CERT NZ, NCSC-NZ). This joint advisory is a comprehensive resource containing common LockBit affiliate tools and exploitations, as well as tactics, techniques, and procedures (TTPs). The advisory also provides recommended mitigations for organizations to reduce the likelihood and impact of future ransomware incidents. Threat actors who use LockBit, the most widely launched and prolific Ransomware-as-a-Service (RaaS) in 2022 and 2023, have targeted organizations of varying sizes in critical infrastructure sectors. This article continues to discuss the joint advisory aimed at helping organizations around the world better understand and protect against this global ransomware threat.