LockBit 3.0 makes a comeback by exploiting Log4j

Threat Level

Actor Report

For a detailed advisory, download the pdf file here

Summary

LockBit 3.0 (LockBit Black), a new variant of LockBit Ransomware, is deploying Cobalt Strike beacons on compromised systems by exploiting the Windows Defender command line tool and Log4j in VMware Horizon.