A hacking group that infiltrated Fulton County, Georgia’s municipal websites is now issuing a ransom demand, threatening to release documents linked to the criminal case involving former President Donald Trump unless their demands are met.
According to Business Insider, the group, known as LockBit, has set a deadline for the ransom payment: 8:49 a.m. ET on Thursday.
Originally, the group had set a deadline for the payment by Saturday, as reported by cybersecurity expert Christopher Krebs.
The cyberattack on Fulton County’s court and other systems, disrupting routine operations, was first reported by CBS News on Jan. 30.
In a message posted in both English and Russian last Saturday, LockBit stated that the stolen documents contain sensitive information, including details about Donald Trump’s legal battles that could have implications for future US elections.
Recently, the Department of Justice (DOJ) announced its involvement, alongside UK and international law enforcement, in disrupting LockBit’s operations. An indictment unsealed by the DOJ accused two Russian nationals of participating in the hacking activities of the group.
Forbes reported a message from LockbitSupp, suggesting that the FBI intervened to prevent the leaking of information from Fulton County.
Despite these disruptions, LockBit seems to have resumed its activities. Business Insider noted that the group appeared to be operational again over the weekend, with a new website showcasing claims of having backup copies of documents from Fulton County.
The message on the website also expressed personal political views, including support for Trump and criticism of President Biden’s handling of border security.
The exact ransom amount demanded by LockBit remains unknown. Dan Schiappa, chief product officer at Arctic Wolf, a cybersecurity firm, explained to Business Insider that such demands are typically negotiated privately.
LockBit, mainly composed of Russian speakers, avoids targeting former Soviet nations. The group provides clients with malware and platforms to execute attacks and demand ransoms.
According to the DOJ, LockBit has victimized over 2,000 entities, amassing more than $120 million in ransom payments and issuing demands totaling hundreds of millions of dollars.
The cyberattack on Fulton County’s computer systems occurred on Jan. 27, resulting in several weeks of service disruptions.
