Skip to content

Malware

BockLit

According to Trend Micro, this is a ransomware written in Go, targeting Windows and MacOS environments that tries to disguise as LockBit by changing the wallpaper into a LockBit 2 screen.

BockLit is a Windows malware family.

Background

Trend Micro reports that this is a Go-based ransomware aimed at Windows and MacOS environments, which masquerades as LockBit by switching the wallpaper to a LockBit 2 screen. The majority of samples carried hard-coded AWS credentials and exfiltrated the stolen data to an Amazon S3 bucket under the threat actor's control.


Source: Malpedia (Fraunhofer FKIE).