Israeli Cybersecurity Authority Warns of LockBit Ransomware Attacks Targeting Organizations

The Israeli National Cyber Directorate has issued a warning about ongoing cyberattacks linked to the LockBit ransomware group targeting organizations within Israel. According to the alert, attackers are exploiting phishing emails, leaked passwords, and security vulnerabilities to infiltrate systems, steal data, and encrypt files for ransom.

The Cyber Directorate emphasized that paying the ransom does not guarantee data recovery nor prevent the stolen information from being leaked later. To mitigate risks, organizations are advised to implement multi-factor authentication for remote access, regularly change passwords, update software and systems, avoid opening suspicious links or files, and restrict access to VPNs and management interfaces.

Additionally, maintaining up-to-date and isolated backups that can be reliably restored is crucial. In the event of a suspected breach, affected parties should immediately disconnect the compromised computer from the network, avoid rebooting it, and refrain from deleting any files or ransom notes to preserve evidence and facilitate investigation.