lockbit2 attacks BannerBuzz
Incident Date:
January 18, 2022
Overview
Title
lockbit2 attacks BannerBuzz
Victim
BannerBuzz
Attacker
Lockbit2
Location
First Reported
January 18, 2022
BannerBuzz Suffers Ransomware Attack by Lockbit2
BannerBuzz, a company specializing in custom banner printing and signs, has been targeted by the ransomware group Lockbit2. The attack was announced on the group's dark web leak site. BannerBuzz operates in the Business Services sector and is known for offering the industry's best prices while using only the highest quality materials.
Company Profile
BannerBuzz is a part of Aavan International, Inc., which includes the brand "Bannerbuzz" and operates under the terms of service and privacy policy. The company is committed to providing high-quality products at low prices, generating customer satisfaction, and being the supplier of choice for the online banner and sign market.
Vulnerabilities and Mitigation
The specific vulnerabilities that led to the ransomware attack on BannerBuzz are not detailed. However, it is recommended for all organizations to secure RDP ports, prioritize remediating known exploited vulnerabilities, and implement EDR solutions to disrupt threat actor memory allocation techniques.
The ransomware attack on BannerBuzz by Lockbit2 underscores the persistent threat of cybercrime in the business services sector. Organizations must remain vigilant and implement robust security measures to protect against such attacks.
Sources
- CISA: StopRansomware: Phobos Ransomware
- BreachSense: Data Breach in 2022 - Unfortunately, a direct URL cannot be provided as BreachSense does not have a public search interface for specific breaches.
- Flare: Ransomware in Context: 2024, A Year of Tumultuous Change - This source appears to be speculative or future-looking and does not have a direct URL available.
Recent Ransomware Attacks
The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.
The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.