M3rx Ransomware

In our recovery lab today at Lockbit Decryptor, we isolated a ransomware strain identified by the actors as M3rx. Our forensic analysis confirms this is a sophisticated, enterprise-targeting ransomware operation. This variant employs a robust hybrid cryptosystem, and our lab has identified a critical flaw in its key exchange protocol that allows for the reconstruction…