| Paper Abstract and Keywords |
| Presentation |
2024-03-21 11:20
Analyzing Attackers and Victims Actions via LockBit3.0 Website Data Dynamics Yuji Sekine, Yin Minn Pa Pa, Katsunari Yoshioka, Tsutomu Matsumoto (YNU) ICSS2023-70 |
| Abstract |
(in Japanese) |
(See Japanese page) |
| (in English) |
LockBit3.0 is one of the top ransomware groups that has been active since July 2022, targeting over 1,000 companies. In February 2024, Operation Cronos, an international law enforcement operation, took down the servers involved, froze the cryptocurrency accounts, and arrested the people involved, but at the time of writing this research report, the details of the operation are not yet known. LockBit3.0 operates as a RaaS (Ransomware as a Service) model, expose victim information and leaked data on their darkweb website while selling the leaked data to the third parties. The information exposed on their website may change according to the victim's negotiation. However, how these changes are related to the victims' actions such as negotiation, extension of ransomware payment deadline has not been well studied. In this study, we monitor LockBit3.0 website over a 166-days period to analyze how the changes of victim information and ransomware payment deadline relate to the actions of attackers and victims. |
| Keyword |
(in Japanese) |
(See Japanese page) |
| (in English) |
Ransomware / Malware / Threat Intelligence / LockBit / / / / |
| Reference Info. |
IEICE Tech. Rep., vol. 123, no. 448, ICSS2023-70, pp. 9-16, March 2024. |
| Paper # |
ICSS2023-70 |
| Date of Issue |
2024-03-14 (ICSS) |
| ISSN |
Online edition: ISSN 2432-6380 |
Copyright and reproduction |
All rights are reserved and no part of this publication may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopy, recording, or any information storage and retrieval system, without permission in writing from the publisher. Notwithstanding, instructors are permitted to photocopy isolated articles for noncommercial classroom use without fee. (License No.: 10GA0019/12GB0052/13GB0056/17GB0034/18GB0034) |
| Download PDF |
ICSS2023-70 |
| Conference Information |
| Committee |
ICSS IPSJ-SPT |
| Conference Date |
2024-03-21 - 2024-03-22 |
| Place (in Japanese) |
(See Japanese page) |
| Place (in English) |
OIST |
| Topics (in Japanese) |
(See Japanese page) |
| Topics (in English) |
Security, Trust, etc. |
| Paper Information |
| Registration To |
ICSS |
| Conference Code |
2024-03-ICSS-SPT |
| Language |
Japanese |
| Title (in Japanese) |
(See Japanese page) |
| Sub Title (in Japanese) |
(See Japanese page) |
| Title (in English) |
Analyzing Attackers and Victims Actions via LockBit3.0 Website Data Dynamics |
| Sub Title (in English) |
|
| Keyword(1) |
Ransomware |
| Keyword(2) |
Malware |
| Keyword(3) |
Threat Intelligence |
| Keyword(4) |
LockBit |
| Keyword(5) |
|
| Keyword(6) |
|
| Keyword(7) |
|
| Keyword(8) |
|
| 1st Author's Name |
Yuji Sekine |
| 1st Author's Affiliation |
Yokohama National University (YNU) |
| 2nd Author's Name |
Yin Minn Pa Pa |
| 2nd Author's Affiliation |
Yokohama National University (YNU) |
| 3rd Author's Name |
Katsunari Yoshioka |
| 3rd Author's Affiliation |
Yokohama National University (YNU) |
| 4th Author's Name |
Tsutomu Matsumoto |
| 4th Author's Affiliation |
Yokohama National University (YNU) |
| 5th Author's Name |
|
| 5th Author's Affiliation |
() |
| 6th Author's Name |
|
| 6th Author's Affiliation |
() |
| 7th Author's Name |
|
| 7th Author's Affiliation |
() |
| 8th Author's Name |
|
| 8th Author's Affiliation |
() |
| 9th Author's Name |
|
| 9th Author's Affiliation |
() |
| 10th Author's Name |
|
| 10th Author's Affiliation |
() |
| 11th Author's Name |
|
| 11th Author's Affiliation |
() |
| 12th Author's Name |
|
| 12th Author's Affiliation |
() |
| 13th Author's Name |
|
| 13th Author's Affiliation |
() |
| 14th Author's Name |
|
| 14th Author's Affiliation |
() |
| 15th Author's Name |
|
| 15th Author's Affiliation |
() |
| 16th Author's Name |
|
| 16th Author's Affiliation |
() |
| 17th Author's Name |
|
| 17th Author's Affiliation |
() |
| 18th Author's Name |
|
| 18th Author's Affiliation |
() |
| 19th Author's Name |
|
| 19th Author's Affiliation |
() |
| 20th Author's Name |
|
| 20th Author's Affiliation |
() |
| 21st Author's Name |
|
| 21st Author's Affiliation |
() |
| 22nd Author's Name |
|
| 22nd Author's Affiliation |
() |
| 23rd Author's Name |
|
| 23rd Author's Affiliation |
() |
| 24th Author's Name |
|
| 24th Author's Affiliation |
() |
| 25th Author's Name |
|
| 25th Author's Affiliation |
() |
| 26th Author's Name |
/ / |
| 26th Author's Affiliation |
()
() |
| 27th Author's Name |
/ / |
| 27th Author's Affiliation |
()
() |
| 28th Author's Name |
/ / |
| 28th Author's Affiliation |
()
() |
| 29th Author's Name |
/ / |
| 29th Author's Affiliation |
()
() |
| 30th Author's Name |
/ / |
| 30th Author's Affiliation |
()
() |
| 31st Author's Name |
/ / |
| 31st Author's Affiliation |
()
() |
| 32nd Author's Name |
/ / |
| 32nd Author's Affiliation |
()
() |
| 33rd Author's Name |
/ / |
| 33rd Author's Affiliation |
()
() |
| 34th Author's Name |
/ / |
| 34th Author's Affiliation |
()
() |
| 35th Author's Name |
/ / |
| 35th Author's Affiliation |
()
() |
| 36th Author's Name |
/ / |
| 36th Author's Affiliation |
()
() |
| Speaker |
Author-1 |
| Date Time |
2024-03-21 11:20:00 |
| Presentation Time |
25 minutes |
| Registration for |
ICSS |
| Paper # |
ICSS2023-70 |
| Volume (vol) |
vol.123 |
| Number (no) |
no.448 |
| Page |
pp.9-16 |
| #Pages |
8 |
| Date of Issue |
2024-03-14 (ICSS) |