ABC News Today

A new ransomware is stealing user data and documents and encrypting the devices of various companies. The hackers behind this ransomware demand large sums of money to free the computers and files they have encrypted. This is the BlackByte ransomware and it is back with version 2.0 which has new extortion techniques borrowed from LockBit. Ransomware steals data and blackmailers demand large sums to decrypt files and not leak data. He is promoting a new data leakage site on hacker forums and via Twitter accounts. As Bleeping Computer reports, it’s unclear if the ransomware’s encryptor has changed, but the gang has launched a new Tor data leak site.

The report says that the data leak site has only one victim as of now, but new extortion strategies force victims to pay almost $5,000 to extend the deadline by 24 hours or have the ability to leak your data. They charge between $200,000 and $300,000, but these prices can change depending on the size/income of the victim.

Here’s everything you need to know about this newly discovered ransomware

What is Black Byte 2.0 Ransomware?

BlackByte 2.0 ransomware is the rebranding of the older BlackByte ransomware operation launched in the summer of 2021. It steals data and corporate documents before encrypting a device and demands a healthy amount not to leak data. Little by little, he leaks data for each victim in an attempt to pressure them into paying a ransom.

How does BlackByte ransomware work?

According to cyber security intelligence firm KELA, threat actors breach networks through vulnerabilities. In the past, they had breached Microsoft Exchange servers using the ProxyShell attack chain.