The LockBit group is using native IT management software to live off the land, planting and then spreading itself before deploying its ransomware.



Source: DarkReading
Source Link: https://www.darkreading.com/threat-intelligence/lockbit-using-rmms-spread-ransomware