Lockbit Ransomware Affects Organizations in Turkey

LockBit ransomware is a malware designed to deny users access to their computer systems and force them to pay a ransom. Once infiltrated, instead of taking immediate action, attackers typically spend a period of silence lasting 10 to 15 days. During this time, they carefully analyze the victim organization's network structure and data infrastructure, try to bypass defenses and identify the most vulnerable points. Critical infrastructures such as storage and backup systems are particularly targeted in this process.

Organizations that are the target of a Lockbit ransomware attack not only face the risk of data loss, but may also have to contend with reputational damage, financial harm and operational disruption. Therefore, it is critical to put in place strong security measures to prevent such attacks and minimize their impact.

Some of the measures we need to take to protect ourselves from such attacks;

• Passwords should not be kept in Cloud-based systems.

• Be careful about suspicious messages and links and avoid clicking on unknown attachments.

• Two-factor authentication system should be used for the security of accounts.

• User awareness trainings should be given importance in your organization.