Recently, our team was analyzing new variants of Lockbit 3.0 ransomware and found a sample by victim. He is the owner of a small tech company in Turkey, contacted our team and sent some sample files for testing. After testing extensively, our team got to know that these files are very similar with the Lockbit 3.0 Black but it uses more stronger encryption and latest techniques to bypass decryption. However, our team was able to decrypt the files with the help of our main server. Moreover, our team also asked for the ransom note for the confirmation of the samples. The person was kind enough to share the ransom note. Guess, what we got there, it was actually the latest variant of Lockbit 3.0 Black mentioning the Black ID. The screenshot from the readme file is also attached.
