Mac users are being targeted by LockBit

What appears to be the first ransomware build designed for macOS has appeared on the web, according to a report from MalwareHunterTeam. While it’s unclear, this could be the first time a major ransomware group like LockBit has targeted Apple devices.

Over the past few years, LockBit has become one of the most powerful ransomware groups. While it focuses on Windows, Linux, and virtual server platforms, it appears to have developed its first ransomware for Macs.

LockBit is believed by security experts to be a Russian-based organization, as most of its members speak Russian. The group is known for its so-called ransomware-for-hire (RaaS) business model, which allows other organizations to pay to use its ransomware.

Người dùng máy Mac đang là mục tiêu của LockBit - Ảnh 1. — New ransomware targets Macs using Apple Silicon chips

Infosec previously warned of the appearance of LockBit ransomware for Macs in November 2022, but so far MalwareHunterTeam says it has not found any mention of it online. With the RaaS approach, security experts warn that there will soon be a wave of ransomware attacks targeting Apple computers.

LockBit's rapid growth is attributed to its business acumen, according to analysts. Jon DiMaggio, a security expert at Analyst1, told Wired that LockBit has created ransomware that anyone can use. The group constantly updates the software, constantly seeks feedback, and cares about the user experience. LockBit "poached" people from rival gangs, running the organization like a business, so it is very attractive to criminals.

Source link