Lorenz
Tesorion describes Lorenz as a ransomware with design and implementation flaws, leading to impossible decryption with tools provided by the attackers. A free decryptor for 2021 versions was made available via the NoMoreRansom initiative. A new version of the malware was discovered in March 2022, for which again was provided a free decryptor, while the ransomware operators are not able to provide tools to decrypt affected files.
Victims
78
First Discovered
victim2020-01-12
Last Discovered
victim2023-12-11
Avg Delay
between attack and claim18.2 days
Infostealer
for victim with domain0.0%
Known Locations (2)
Target (Available)
Top 5 Activity Sectors
- Critical Manufacturing 1
Top 5 Countries
-
Australia
1
Heatmap (Available)
Ransom Notes (2)
Tools Used (Not Available)
No tools used available.
Vulnerabilities Exploited (0)
No vulnerabilities exploited available.
TTPs Matrix (0)
No TTPs available.
Negotiation Chats (0)
No negotiation chats available.
YARA Rules (1)
Indicators of Compromise (IoCs) (0)
No IoCs available for this group.
Victims (78)
Bayer Heritage Federal Credit Union
Lorenz
Discovery Date: 2023-12-11
Estimated Attack Date: 2023-12-01
Estimated Attack Date: 2023-12-01
N/A
Truck Bodies & Equipment International
Lorenz
Discovery Date: 2023-11-07
Estimated Attack Date: 2023-10-27
Estimated Attack Date: 2023-10-27
N/A
Broad River Retail/Ashley Store
Lorenz
Discovery Date: 2023-10-25
Estimated Attack Date: 2023-10-15
Estimated Attack Date: 2023-10-15
N/A
