Exitium Ransomware

In our recovery lab today at Lockbit Decryptor, we isolated the Exitium ransomware strain. Our analysis confirms this is not a sophisticated enterprise threat but a variant of the open-source Chaos ransomware. This variant uses a stream cipher with a hard-coded key and appends the .exitium extension. Despite its threatening ransom note and strict deadlines,…