New LockBit Cyberattack Strikes – Four More Victims Fall Prey

December 15, 2023
1 min read

Key Points:

  • The LockBit ransomware group has targeted four new companies, including three US-based businesses and one China-based establishment.
  • The victims are Bemes, Inc., Spirit Leatherworks, Robert F. Pagano & Associates, and Goldwind.
  • While the LockBit group has claimed responsibility for these engagements, official statements from the targeted entities are still awaited for confirmation.

The notorious LockBit ransomware group has broadened its victim base with four recent attacks targeting US-based firms Bemes, Inc., Spirit Leatherworks, and Robert F. Pagano & Associates, as well as China-based Goldwind. According to the group’s dark web data leak portal, each victim faces unique data release deadlines, although these timelines remain unverified until the impacted companies confirm.

Bemes, Inc., a healthcare equipment company that specializes in leasing and maintaining respiratory and respiratory-related equipment; Spirit Leatherworks, a designer, manufacturer, and distributor of leather goods; Robert F. Pagano & Associates, a CPA and business advisory firm based in Boston, Massachusetts; and Goldwind Science & Technology Co., Ltd. (Goldwind), a multinational from China that constructs and operates wind power plants, have all been identified as victims of these cyberattacks.

LockBit, an active ransomware group for over four years, is known for its double extortion methods – encrypting victims’ data and threatening its exposure if their demands are not met. The group has managed to extort approximately $91 million since 2020, according to the US Government, making it one of few ransomware groups to use self-spreading malware technology and double encryption. The LockBit group has also conducted at least 1700 cyberattacks on different US-based enterprises, according to the Cybersecurity and Infrastructure Security Agency (CISA). Their typical modus operandi involves extorting money via the capture of confidential information, which they then use as leverage.

Latest from Blog

MediSecure hacked with massive ransomware data breach

Summary of ‘MediSecure hit by large-scale ransomware data breach’ TLDR: MediSecure, an Australian prescriptions provider, was hit by a large-scale ransomware attack. The incident is believed to have originated from one of

Equalizing cybersecurity for all

TLDR: A discussion on how organizations can enhance their cybersecurity posture with Blumira’s automated threat monitoring, detection, and response solutions. Blumira is working to lower the barrier to entry in cybersecurity for

Big cyber-attacks cost less now

Summary of Unexpectedly, the cost of big cyber-attacks is falling TLDR: Cybercrime costs are expected to rise to $23 trillion by 2027, according to Anne Neuberger Data shows that the economic impact