The LockBit ransomware group, credited with nearly half of all ransomware attacks in 2022, has introduced various new entities over this past weekend. The threat group released their newest ransomware-as-a-service (RaaS) operation called “LockBit 3.0”. The first bug bounty program established by a ransomware group was also introduced. The program offers rewards ranging from $1,000 to $1 million for “all security researchers, ethical [hackers], and unethical hackers on the planet,” to submit bug reports for LockBit 3.0. The bug bounty program is unique as it is offering bounties for rewards in the following categories:
-
- Web Site Bugs (“XSS vulnerabilities, mysql injections, getting a shell to the site and more”)
- Locker Bugs (“Any errors during encryption by lockers that lead to corrupted files or to the possibility of decrypting files without getting a decryptor”)
- Brilliant Ideas (Ideas on how to improve LockBit 3.0’s site or software)
- Doxing (“Doxing the affiliate program boss [LockBitSupp]…get $1 million in bitcoin or monero for it”)
- TOX Messenger (“Vulnerabilities of TOX messenger that allow you to intercept correspondence, run malware, determine the IP address of the interlocutor and other interesting vulnerabilities”)
- Tor Network (“Any vulnerabilities which help to get the IP address of the server where the site is installed on the onion domain, as well as getting root access to our servers, followed by a database dump and onion domains”)
LockBit also announced the acceptance of Zcash cryptocurrency on LockBit 3.0’s negotiation and data leak sites. CTIX analysts will continue to track LockBit’s activity and recommend that all security professionals monitor as well.