{"id":26952,"date":"2023-01-02T02:37:44","date_gmt":"2023-01-02T02:37:44","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2023\/01\/02\/lockbit-releases-free-decryptor-apologizes-for-ransomware-attack-on-childrens-hospital\/"},"modified":"2023-01-02T02:37:44","modified_gmt":"2023-01-02T02:37:44","slug":"lockbit-releases-free-decryptor-apologizes-for-ransomware-attack-on-childrens-hospital","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2023\/01\/02\/lockbit-releases-free-decryptor-apologizes-for-ransomware-attack-on-childrens-hospital\/","title":{"rendered":"LockBit releases free decryptor, apologizes for ransomware attack on children’s hospital"},"content":{"rendered":"

<\/a>\n
<\/p>\n

\n

Ransomware gangs are known for many things, none of them good, but for a change, it turns out some of them do have a heart when it comes to sick children in hospitals.<\/p>\n

The infamous LockBit ransomware gang has released a free decryptor for the Hospital for Sick Children in Toronto, Canada after one of their affiliates targeted the hospital in a ransomware attack. The ransomware attack was detected on Dec. 19<\/a> and affected several network systems resulting in a \u201cCode Grey \u2013 system failure.\u201d<\/p>\n

The attack impacted internal clinical and corporate systems, hospital phone lines and web pages. Fortunately, the attack did not affect patient care and the hospital claimed that there was no evidence of personal and health information being impacted.<\/p>\n

In a statement on its leaks site on Dec. 31, LockBit apologized for the attack and released the decryptor. \u201cWe formally apologize for the attack on sikkids.ca and give back the decryptor for free,\u201d the statement reads. \u201cThe partner who attacked this hospital violated our rules, is blocked and is no longer in our affiliate program.\u201d<\/p>\n

LockBit operates on a ransomware-as-a-service model where affiliates use already developed ransomware to execute ransomware attacks. Affiliates earn a percentage of each successful ransom payment, with LockBit earning money without the need to employ people to undertake ransomware attacks directly.<\/p>\n

Bleeping Computer reports<\/a> that the decryptor file appears legitimate but notably claims to be a Linux\/VMware ESXi decryptor, with no support for Windows. This is said to indicate that the LockBit affiliate was only able to encrypt virtual machines on the hospital\u2019s network.<\/p>\n

First observed in 2019, LockBit is one of the most prolific ransomware gangs, with attacks against\u00a0Accenture PLC<\/a>\u00a0and\u00a0Bangkok Airways Public Co. Ltd.<\/a>\u00a0among its many successful targets. Despite repeated attempts by law enforcement and others<\/a> to bring LockBit down, including the arrest of an affiliate in November<\/a>, the gang, through its affiliates, continues to target companies and organizations across the globe.<\/p>\n

While ransomware remains a severe ongoing issue, a report in October surprisingly found that despite media reports, it\u2019s not actually getting worse. The\u00a0Digital Shadows Ltd. report<\/a> found that the number of ransomware attacks was dropping. The drop in ransomware attacks was attributed to ransomware actors regrouping and refocusing after a busy start to the year. The report highlighted LockBit as the most prolific ransomware group in the third quarter of 2022.<\/p>\n

Photo: Raysonho\/Wikimedia Commons<\/a><\/h5>\n
\n
\n

Show your support for our mission by joining our Cube Club and Cube Event Community of experts. Join the community that includes Amazon Web Services and Amazon.com CEO Andy Jassy, Dell Technologies founder and CEO Michael Dell, Intel CEO Pat Gelsinger and many more luminaries and experts.<\/span><\/h3>\n<\/div><\/div>\n