LockBit 2.0 has been responsible for various high-profile attacks in 2021, including victims such as Accenture, following the launch of a marketing campaign to recruit new affiliates in mid-2021. LockBit ransomware first appeared in September 2019 and in June 2021, the group rebranded to LockBit 2.0, like several other families did in 2021.

The LockBit gang (aka Bitwise Spider) are the developers of the LockBit Ransomware-as-a-Service (RaaS). On 4 February 2022, the FBI issued FLASH security advisory on Indicators of Compromise (IOCs) associated with LockBit 2.0 ransomware, one of the most active ransomware groups in the current cybercrime ecosystem. Impersonation Process With The Same Authentication ID.Launching Threads To Traverse Live Hosts’ Network Shares.Cryptography & Multithreading Initialization.Forcing GPUpdate On All Hosts Through PowerShell.COM Retrieve IGroupPolicyObject Interface.

Checking If Running On Primary Domain Controller.Setting Group Policy For Active Directory.Anti-Analysis: Inline Dynamic API Resolving.

What is tdsskiller text document