LockBit Claims Responsibility for Entrust Ransomware Attack

The June attack of security company Entrust has now been claimed by LockBit, a prominent Ransomware-as-a-Service (RaaS) group.

LockBit Finally Claims Entrust Attack Two Months After Its Occurrence

On June 18th, 2022, security solutions firm Entrust suffered a severe ransomware attack. In this attack, a significant swathe of data was stolen from Entrust’s internal systems that contained customer information.

Entrust focuses on providing hardware and software security solutions to its clientele. The company deals heavily in online trust and identity management, allowing its customers to use their tools to stay safe in the digital realm.

4

In August 2022, security researcher Dominic Alvieri told the Bleeping Computer publication that LockBit operators had created a page on their website with a countdown timer for the release of the stolen Entrust files.

Alvieri also confirmed in a recent tweet that LockBit had claimed the attack, and stated that LockBit was set to release the data on August 19th.

A clean hallway floor in a home.

It is not known exactly what kind of data was retrieved by the LockBit operators during the attack, as Entrust has not disclosed this information. It is also thought that Entrust has not yet engaged or negotiated with the malicious party who stole the data.

Entrust Took Some Time to Acknowledge the Attack

It wasn’t until July 2022 that Entrust finally acknowledged the June attack, though the company remained tight-lipped on the situation. In an official statement shown in the tweet below by Dominic Alvieri, Entrust stated that an “unauthorized party” had gained access to certain information within its internal systems.

Entrust claimed in the same statement that, at the time of writing, none of the services offered by the company had been compromised as a result of the attack.

A computer monitor showing the Windows 11 security settings

LockBit Ransomware Continues to Pose a Threat

In recent years, LockBit has become one of the most prevalentRansomware-as-a-Servicegroups in the world, alongside other prominent criminal entities like DarkSide and Conti.

The LockBit ransomware family is now on its third iteration, known as LockBit 3.0. This ransomware has already been used todeploy Cobalt Strike beaconson Widows and VMWare systems, putting users around the world at risk. It is not yet known to what extent LockBit 3.0 will continue to be used to attack individuals and organizations alike.

Using hidden Windows menu

Ransomware Attacks Are Still on the Rise

As Ransomware-as-a-Service groups become increasingly powerful, more malicious parties have the ability to carry out their own attacks on unsuspecting victims. With big organizations often being targeted by these illicit actors, we may see a continued string of large-scale data breaches and leaks as a result of ransomware attacks in the near future.

Infamous for taking down large corporations and countries alike, Conti Ransomware has slowly grown in popularity. Here’s everything you need to know.

blue and red lock graphic behind entrust company logo

Every squeak is your PC’s way of crying for help.

My iPhone does it all, but I still need my dumb phone.

Not all true crime is about hacking, slashing, and gore.

It’s not super flashy, but it can help to keep your computer up and running.

Who asked for these upgrades?

Technology Explained

PC & Mobile