ZeroFox Intelligence Flash Report - LockBit Ends 2023 with Record Number of Attacks

Product Serial: F-2024-01-09a

TLP:CLEAR

In this flash report, ZeroFox researchers report on the Ransomware & Digital Extortion (R&DE) threat collective LockBit's record number of attacks in Q4 2023 (October-December).

Standing Intelligence Requirements

Deep Dark Web and Criminal Underground DDW

For the most up-to-date list of ZeroFox’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/intelligence/advisories/14956

Link to Download

View the full report here

Key Findings

Ransomware & Digital Extortion (R&DE) threat collective LockBit conducted more attacks during Q4 2023 (October-December) than in any other quarter, despite their activity accounting for a significantly reduced proportion of the wider threat landsape’s activity.
It is almost certain that LockBit is benefitting from the December disruption of other R&DE collectives—particularly through procuring affiliates from ALPHV and NoEscape.
A greater proportion of LockBit’s attacks were leveraged against the manufacturing and retail industries in Q4 2023, both of which are above the threat landscape average.