LockBit3 ransomware group lists virtuosgames.com on its leak site

• Ransomware group: LockBit3
• Country: Singapore
• Sector: Technology
• Announcement date: February 3, 2023

The LockBit3 ransomware group has listed virtuosgames.com on its dedicated leak site. According to the announcement published on February 3, 2023, the threat actor group claims to have successfully compromised data belonging to the organization.

The details of the claim

The incident involves a claim made by the LockBit3 group regarding the unauthorized access to information belonging to virtuosgames.com. The announcement was officially posted on the group's leak platform on February 3, 2023, coinciding with the date the group claims the attack occurred. As part of their typical extortion tactics, the group has issued threats to release the institution's data if their demands are not met.

Ransomware groups often utilize leak sites to apply pressure on their victims through a method known as double extortion. In these scenarios, attackers do not merely encrypt a company's systems to disrupt operations; they also exfiltrate sensitive information. By threatening to publish this stolen data on a public forum, the attackers aim to cause maximum reputational and legal damage, forcing the organization to consider paying a ransom to prevent the leak.

Data involved in the incident

Regarding the specifics of the breach, there is no screenshot or detailed information available regarding the nature of the leaked or threatened data. The listing names no specific data types or files that have been compromised.

Organization profile

Virtuos is a leading content production company specializing in video game development and art production. Founded in 2004, the company maintains a significant global presence with operations spanning across Asia, North America, and Europe. The organization is a large-scale operation, employing over 3,500 full-time professionals to support its diverse production needs.

Risk assessment and industry implications

This incident may pose significant risks to the operational continuity of the institution. If the data is indeed leaked, negative impacts on the institution's intellectual property and employee data could be observed. For companies in the technology and content production sectors, the loss of intellectual property is a critical risk that can undermine competitive advantages and long-term business strategies.

LockBit3 is a known Ransomware-as-a-Service (RaaS) group that has been tracked since 2019. While the group's infrastructure was disrupted by an international operation in February 2024, reports indicate that they have resumed operations. This persistence highlights the ongoing challenge faced by organizations dealing with sophisticated RaaS models where specialized developers provide tools to affiliates to carry out attacks.

The potential consequences of such a breach extend into the legal and security domains. Legal processes could be triggered under the data protection regulations in the regions where the institution operates, particularly given its widespread presence in multiple continents. Furthermore, a secondary risk following such an incident is the occurrence of targeted phishing attacks, as stolen information can be used to craft highly convincing social engineering campaigns against employees or partners.

To mitigate these risks, organizations typically focus on robust defensive measures. These include implementing multi-factor authentication, maintaining rigorous patch management schedules to close vulnerabilities, and conducting regular employee training to recognize phishing attempts. Additionally, maintaining offline, immutable backups is a standard industry practice to ensure that operational continuity can be restored even if primary systems are compromised by ransomware.