LockBit 3.0 Ransomware Attack on Deutsche Telekom AG

Incident Date:

May 7, 2024

Overview

Title

LockBit 3.0 Ransomware Attack on Deutsche Telekom AG

Victim

Deutsche Telekom AG

Attacker

Lockbit3

Location

Bonn, Germany

, Germany

First Reported

May 7, 2024

Ransomware Attack on Deutsche Telekom AG by LockBit 3.0

Victim Profile

Deutsche Telekom AG, a leading integrated telecommunications company, with over 252 million mobile customers, 25 million fixed-network lines, and 22 million broadband lines. The company operates globally in more than 50 countries, providing a wide range of services including fixed-network/broadband, mobile communications, Internet, and IPTV products for consumers, and ICT solutions for business customers.

Company Standout Features

The company stands out in the industry due to its strong focus on innovation, sustainability, and customer service. The company invests significantly in expanding its networks, particularly in the development of 5G technology. It is committed to reducing its environmental impact and promoting digital inclusion. Deutsche Telekom also actively participates in digital policy debates and advocates for responsible policy making.

Company Vulnerabilities

The German company has been targeted by the cybercrime group LockBit 3.0 using ransomware techniques. Deutsche Telekom's large scale and global presence make it an attractive target for threat actors like the LockBit 3.0 ransomware group. The company's extensive network infrastructure and customer data could be vulnerable to cyber attacks, while the company's commitment to innovation and adoption of new technologies may introduce potential security risks if not adequately protected.

Ransomware Group Distinction

LockBit 3.0, also known as LockBit Black, is a highly sophisticated ransomware group that encrypts files, modifies filenames, changes desktop wallpapers, and drops ransom notes on victims' desktops. The group operates under a Ransomware-as-a-Service model, allowing other cybercriminals to use their malware for attacks. LockBit 3.0 is known for its advanced features like lateral movement through networks and covering its tracks to evade detection.

LockBit May Attacks

This ransomware attack on Deutsche Telekom AG is part of the May 2024 attacks by LockBit 3.0. The cybercriminal group resurfaced with vigor following the disruption of its infrastructure in February during "Operation Cronos." Despite law enforcement efforts, LockBit swiftly returned, targeting over 50 victims within hours of reactivating its platform. The group's adaptability and global reach showcase the challenges in combating cybercrime effectively.

Sources:

Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.

Hanwa Co Ltd Hit by Brain Cipher Ransomware Attack

Gurugram, India

, India

Industry

Holding Companies & Conglomerates

Victim