LockBit ransomware officially returns — hackers hit back with new attacks following apparent shutdown

ID theft.

Infamous ransomware operator LockBit has apparently returned, boasting new encryptors, new infrastructure, and new data leak and negotiation websites.

Earlier this week, cybersecurity researchers from Zscaler reported that new LockBit victims received a ransom note with a different Tor URL for further steps, with BleepingComputer also finding two new encryptor variants uploaded to VirusTotal in two consecutive days, both holding the new notes.