Cracking Ransomware: Bypassing Anti-Analysis Techniques and Decrypting LockBit Black Ransomware

SANS Ransomware Summit 2023

Cracking Ransomware: Bypassing Anti-Analysis Techniques and Decrypting LockBit Black Ransomware

Speaker: Noël Keijzer, Incident Responder/Reverse Engineer, Northwave

In the last years, ransomware groups have been knocking companies offline across the world, demanding ever-increasing sums of money for a key to unlock encrypted machines and data. From a technical perspective, the biggest challenge is to decrypt the hostage data held for ransom, without a valid decryption key. Some say that this is close to impossible. But reverse …

analysis anti-analysis bypassing companies cracking data encrypted engineer incident incident responder key knocking lockbit machines money ransomware ransomware groups responder reverse reverse engineer sans summit techniques unlock world