Lorenz ransomware crew bungles blackmail blueprint by leaking two years of contacts

The Lorenz ransomware group leaked the details of every person who contacted it via its online contact form over the course of the last two years. A security researcher noticed Lorenz's dark web victim blog was leaking backend code, pulled the data from the site, and uploaded to it a public GitHub repository. The data …

[Dev_Fit]

This is an amazing own goal... I mean, a broken Apache server, really? Super embarrassing for these criminal losers - I love it

[Anonymous Coward]

Well it's going to VAR to check if it is actually an own goal........and they'll get the decision wrong.

You can guess which team is popular in my household.

[The Oncoming Scorn]

Double Whammy - Not Me But Someone I worked With

Who got his personal details stolen from a site was bad enough...

Who while reading the story on a news site & saw his name with address details as part of a screengrab by the reporter.

[Prst. V.Jeltz]

Ethical?

A security researcher noticed Lorenz's dark web victim blog was leaking backend code, pulled the data from the site, and uploaded to it a public GitHub repository.

wow, talk about victim shaming!

[Kevin McMurtrie]

Re: Ethical?

It's not so clear if the victims paid ransoms to keep the gang funded.

[John Brown (no body)]

Re: Ethical?

Yeah,. pretty much the entire story seems to be "we know who tried to contact the gang". There's no juicy bits of useful info such as inter-gang comms or insider dirt, no scandal. Unless there's more to come, it's just a little bit of schadenfreude and not much else. I think I'm more disappointed than anything else.

[sanmigueelbeer]

Re: Ethical?

Victim shaming would be going back to Lorenz with, "I got your data. Pay up or else."

[anonymous boring coward]

"According to htmalgae, Lorenz closed access to its online contact form, preventing contact attempts using it, but the root issue "has not been addressed.""

Don't friggin tell them!

[An_Old_Dog]

Executive Decision within Lorenz

"We're too busy to run our web server. Just outsource it!"

[sev.monster]

Re: Executive Decision within Lorenz

I would not be surprised if Lorenz themselves were incompetent enough to have written this PHP. All the modern ransomware gangs that bother with it seem to be at least decent with social engineering, while merely Bogarting other groups' ransomware code. I don't believe they are anywhere as competent as many may think.