BlackLock Ransomware Exposed After Researchers Exploit Leak Site Vulnerability
Threat hunters have successfully gained access to the web infrastructure of the ransomware gang BlackLock, revealing important details about their methods of operation. This is an example of hacking the hackers.
According to Resecurity, it discovered a security flaw in the e-crime group's data leak site (DLS) that allowed configuration files, login credentials, and the history of commands run on the server to be extracted.
According to the firm, the vulnerability relates to a specific configuration error in the BlackLock Ransomware's Data Leak Site (DLS), which exposed clearnet IP addresses associated with their network architecture that hosts TOR hidden services and other service data.
One of the largest operational security (OPSEC) lapses of the BlackLock ransomware was charact...