Concorr, Inc. Targeted: LockBit 3.0 Ransomware Attack

Incident Date:

May 1, 2024

World map

Overview

Title

Concorr, Inc. Targeted: LockBit 3.0 Ransomware Attack

Victim

Concorr, Inc.

Attacker

Lockbit3

Location

Sterling, USA

Virginia, USA

First Reported

May 1, 2024

Ransomware Attack on Concorr, Inc. by LockBit 3.0

Company Profile

Concorr, Inc., based in Sterling, Virginia, operates the website concorr.com, specializing in data analysis and visualization tools focused on network data and correlation coefficients. With an estimated revenue of $1 million and a small team of approximately 3 employees, Concorr, Inc. stands out in its niche sector by providing specialized statistical methods and tools. These tools are essential for analyzing relationships between variables in networked data, utilizing advanced algorithms like the Concordance Correlation Coefficient (CCC) and the CONCOR algorithm.

Details of the Ransomware Attack

The LockBit 3.0 ransomware group, also known as LockBit Black, has targeted the commpany through a ransomware attack, encrypting critical data and demanding a ransom for its release. This attack highlights the ongoing threat posed by ransomware groups to companies of all sizes, including those in specialized sectors like software development for data analysis.

Vulnerabilities and Attack Vectors

Given the small size of the victim, it is plausible that the company may have limited resources dedicated to cybersecurity, making it an attractive target for ransomware attacks. LockBit 3.0's modus operandi includes leveraging sophisticated techniques such as lateral movement through networks and obfuscation tactics to evade detection. The group's ability to customize its ransomware to target specific organizational weaknesses could have played a role in the successful penetration of Concorr, Inc.’s defenses.

Sources

Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.