Osiris is a ransomware operation that emerged in 2024, following the international law enforcement disruption of LockBit's infrastructure during Operation Cronos. It operates as a rebranded continuation of the LockBit Black (LockBit 3.0) ransomware, retaining the same codebase, ransom note structure, and established operational tactics. The group employs a Ransomware-as-a-Service (RaaS) model and is primarily motivated by financial gain through double extortion, which involves exfiltrating sensitive data prior to encryption and subsequently threatening public disclosure via leak sites. This group is distinguished by its direct lineage from LockBit Black, demonstrating a resilient continuation of established operations despite significant law enforcement action.

Paises afectados

Sectores atacados