LockBit ransomware gang appears to be targeting Macs for the first time

Over the final a number of years, LockBit has turn out to be one in every of the strongest ransomware gangs. While it has targeted on Windows, Linux, and digital host machines, it seems like the group has developed its first ransomware for Macs.

Discovered by MalwareHunterTeam (by way of Brett Callow), what appears to be the first ransomware construct designed for macOS has surfaced on the net. While it’s not totally clear, it could additionally be the first time a serious ransomware gang is targeting Apple units.

As a little bit of background, LockBit is believed by safety analysts to be a Russian-based group as most of the members are Russian-speaking. However, the chief has stated he operates out of the US or China.

LockBit has grown because it runs a ransomware-as-a-service (RaaS) operation. That method means the group lets others use their ransomware – for a worth.

It seems like this LockBit ransomware was created for Apple Silicon Macs with the construct title being “locker_Apple_M1_64.”

While infosec Twitter account vx-underground talked about the look of this LockBit ransomware for Mac exhibiting up in a single place with a date of November 2022, MalwareHunterTeam says they haven’t discovered any mentions of it on-line and I discovered the similar, so it appears it could have gone beneath the radar till now if it was round since final fall.

In any case, MalwareHunterTeam believes that is the first public alert about LockBit going after Apple units. And with the gang’s RaaS method, it’s doable we may see an incoming wave of ransomware assaults targeting Macs.

Curiously, whereas the M1 ransomware construct might seize the most consideration, a LockBit ransomware construct can also be exhibiting up for PowerPC Macs.

Speaking with Wired earlier this yr, Jon DiMaggio from Analyst1 shared that one in every of the causes LockBit has grown so highly effective is its chief’s enterprise savvy.

“They are the most notorious ransomware group, because of sheer volume. And the reason for their success is that the leader is a good businessman,” says Jon DiMaggio, chief safety strategist at Analyst1 who has studied LockBit’s operations extensively. “It’s not that he’s got this great leadership capability. They made a point-and-click ransomware that anyone could use, they update their software, they’re constantly looking for user feedback, they care about their user experience, they poach people from rival gangs. He runs it like a business, and because of that, it is very, very attractive to criminals.”

• Should iPhone homeowners fear about the menace of juice jacking?
• Why the FBI says you must keep away from public cellphone chargers at airports and malls
• PSA: iOS 16.4.1 and macOS 13.3.1 patch two ‘actively exploited’ safety vulnerabilities
• Terrifying examine reveals how briskly AI can crack your passwords; right here’s how to defend your self