<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<span class="x_elementToProof ContentPasted0" style="font-size:12pt;margin:0px">Hello,</span></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<div class="x_x_elementToProof" style="font-size:12pt;margin:0px;background-color:rgb(255, 255, 255)">
<div style="margin:0px;background-color:rgb(255, 255, 255)" class="ContentPasted0">
I hope everyone is doing well!</div>
<div style="margin:0px;background-color:rgb(255, 255, 255)"><br class="ContentPasted0">
</div>
<div style="margin:0px;background-color:rgb(255, 255, 255)" class="ContentPasted0">
Below is the entry for today.</div>
<div style="margin:0px;background-color:rgb(255, 255, 255)"><br class="ContentPasted0">
</div>
<div class="x_elementToProof ContentPasted0" style="margin:0px;background-color:rgb(255, 255, 255)">
09/22/2022 - Diary entry #600:</div>
<div style="margin:0px;background-color:rgb(255, 255, 255)"><br class="ContentPasted0">
</div>
<blockquote style="background-color:rgb(255, 255, 255);margin-top:0px;margin-bottom:0px">
<div class="x_elementToProof ContentPasted0" style="margin:0px">This week the builder of Lockbit 3.0 (the tool responsible for building and configuring Lockbit samples) was published on GitHub, under the repository "LockBit-Black-Builder". The leaked tools
allow threat actors to quickly generate Lockbit samples while enabling optional features (like process killing and other parameters for the encryption) through a configuration file. The tool also comes with Lockbit decryptor, which can be used if in possession
of the private key.
<div><br>
</div>
<div>According to the Twitter account VX-Underground, which was contacted by the representative of Lockbit, the build was leaked by an unsatisfied member of Lockbit.</div>
<div><br>
</div>
<div>Lockbit 3.0, as covered in our Daily Diary #597, is by itself a fork of another ransomware family: BlackMatter, and the release of the builder will also allow other cybercrime gangs to build their own version of Lockbit - either by just rebranding the
malware and ransom notes or by modifying the malware to their need.</div>
<div><br>
</div>
On the other hand, with the builder, cybersecurity researchers can conduct more tests and analyze easily how Lockbit behaves - allowing the development of more robust protection mechanisms.<br class="ContentPasted0">
</div>
</blockquote>
<div style="margin:0px;background-color:rgb(255, 255, 255)"><br class="ContentPasted0">
</div>
<span style="margin:0px;background-color:rgb(255, 255, 255);display:inline !important" class="ContentPasted0">Kind Regards,</span><br class="ContentPasted0">
</div>
<div style="font-size:15px;margin:0px;color:rgb(32, 31, 30);background-color:rgb(255, 255, 255)">
<div style="font-size:12pt;margin:0px;color:rgb(0, 0, 0)"><br class="ContentPasted0">
</div>
<div style="margin:0px">
<div style="margin:0px">
<div style="font-size:12pt;margin:0px;color:rgb(0, 0, 0)"></div>
<div style="margin:0px"></div>
<div style="margin:0px"></div>
<div style="margin:0px"></div>
<div style="font-size:12pt;margin:0px;color:rgb(0, 0, 0)">
<table style="font-size:medium;font-family:"Times New Roman"">
<tbody>
<tr>
<td width="180" align="left" style="width:180px">
<table width="120" align="left">
<tbody>
<tr>
<td colspan="3" align="center"><a href="https://www.appgate.com/" target="_blank" rel="noopener noreferrer" data-auth="NotApplicable" data-safelink="true" data-linkindex="0" style="margin:0px" class="ContentPasted0"><img alt="" width="120" height="30" style="margin:0px" src="https://d3aafpijpsak2t.cloudfront.net/images/Signature/logo@2x.png"></a></td>
</tr>
<tr>
<td colspan="3" align="center" class="ContentPasted0"> </td>
</tr>
<tr>
<td width="37%" align="center"><a href="https://www.linkedin.com/company/appgate-security/" target="_blank" rel="noopener noreferrer" data-auth="NotApplicable" data-safelink="true" data-linkindex="1" style="margin:0px" class="ContentPasted0"><img width="18" height="18" alt="" style="margin:0px" src="https://d3aafpijpsak2t.cloudfront.net/images/Signature/likedin@2x.png"></a></td>
<td width="28%"><a href="https://twitter.com/AppgateSecurity" target="_blank" rel="noopener noreferrer" data-auth="NotApplicable" data-safelink="true" data-linkindex="2" style="margin:0px" class="ContentPasted0"><img width="20" height="18" alt="" style="margin:0px" src="https://d3aafpijpsak2t.cloudfront.net/images/Signature/twitter@2x.png"></a></td>
<td width="35%"><a href="https://www.youtube.com/channel/UC-8GvxcZbm-R3EJNl8jYjiQ" target="_blank" rel="noopener noreferrer" data-auth="NotApplicable" data-safelink="true" data-linkindex="3" style="margin:0px" class="ContentPasted0"><img width="26" height="18" alt="" style="margin:0px" src="https://d3aafpijpsak2t.cloudfront.net/images/Signature/youtube@2x.png"></a></td>
</tr>
</tbody>
</table>
<p style="margin-top:0px;margin-bottom:0px" class="ContentPasted0"> </p>
</td>
<td width="350" colspan="2" rowspan="2" style="width:350px">
<p style="margin-top:0px;margin-bottom:0px;font-family:Arial, Helvetica, sans-serif;font-size:13px;color:rgb(12, 12, 12)">
<strong class="ContentPasted0"></strong></p>
<table style="background-color:rgb(255, 255, 255)">
<tbody>
<tr>
<td colspan="2" rowspan="2" style="width:350px">
<p style="margin-top:0px;margin-bottom:0px;font-size:13px;font-family:Arial, Helvetica, sans-serif;color:rgb(12, 12, 12) !important">
<strong class="ContentPasted0">MART</strong><br class="ContentPasted0">
</p>
<p style="margin-top:0px;margin-bottom:0px;font-size:13px;font-family:Arial, Helvetica, sans-serif;color:rgb(12, 12, 12) !important" class="ContentPasted0">
Malware Analysis and Research Team<br class="ContentPasted0">
</p>
<p style="margin-top:0px;margin-bottom:0px;font-size:13px;font-family:Arial, Helvetica, sans-serif;color:rgb(12, 12, 12) !important">
<strong class="ContentPasted0">Appgate</strong></p>
<p style="margin-top:0px;margin-bottom:0px;font-size:13px;font-family:Arial, Helvetica, sans-serif;color:rgb(12, 12, 12) !important" class="ContentPasted0">
E:<span style="margin:0px"><span style="margin:0px" class="ContentPasted0"> </span><a href="mailto:ctas-mat@appgate.com" target="_blank" rel="noopener noreferrer" data-auth="NotApplicable" title="mailto:ctas-mat@appgate.com" data-linkindex="4" data-safelink="true" style="margin:0px" class="ContentPasted0"><span style="margin:0px">ctas-mat@appgate.com</span></a></span></p>
</td>
</tr>
</tbody>
</table>
<p style="margin-top:0px;margin-bottom:0px;font-family:Arial, Helvetica, sans-serif;font-size:13px;color:rgb(12, 12, 12)">
<span style="margin:0px;background-color:rgb(255, 255, 255);display:inline !important"></span></p>
</td>
</tr>
</tbody>
</table>
</div>
</div>
</div>
</div>
<div style="margin:0px">
<div style="margin:0px">
<div style="margin:0px"><span style="font-size:12pt;margin:0px"></span></div>
</div>
</div>
<br>
</div>
</body>
</html>