[LOCKBIT] Behind The Lines of LockBit R.a.a.S.

PRODAFT Threat Intelligence (also known as "PTI") Team has analyzed critical LockBit ransomware infrastructure and gained in-depth knowledge about the threat actors who operate LockBit ransomware. The PTI team was able to decrypt most of the LockBit victims and uncovered the inner workings of a semi-automated R.a.a.S. platform. Our report includes anonymized victim telemetry, money flow analysis, infrastructure analysis, profit estimations, and threat actor information.