Researchers found a DarkBit link to LockBit

Days after DarkBit, a new hacker group with an avowed anti-Israel agenda, attacked the Technion University, CRIL researchers discovered that it was a modified version of the well-known LockBit ransomware.

For example, encrypted files are given the extension “.DECODE_”, and the ransom note includes a unique URL to communicate and negotiate with

The hackers.

It is recommended to see the full investigation:

https://blog.cyble.com/2023/02/15/uncovering-the-dark-side-of-darkbit-ransomware/