Ransomware LockBit: anomalies after dismantling

  • It would be useful to understand the reason for the spread of LockBit through email.
  • The onion references in the ransom note are no longer accessible, making it impossible to monetize through ransom.
  • It is likely that the objective is purely destructive.

Source: Original Post