LockBit
Named by 5 kept items in this workspace.
3 items name it under threat actors and 2 under classification.key entities.
Search every workspace for LockBit. It matches the name as written, so it can find other things that share it.
The items that name it 5
Ransomware family whose leaked source code shows extensive overlap with SafePay, down to shared command-line flags and encryption logic; referenced as basis for comparison from analysis of Lockbit samples from end of 2022.
Cited as example of RaaS family showing up across different intrusion chains
Emergent Lockbit ransomware variant targeting macOS described in a 2023 Objective-See blog; according to Patrick Wardle, the sample lacked a valid code-signing signature and ignored TCC and other macOS file-system protections, posing no real threat to macOS users at the time
All threat actors in this workspace.