{"id":55826,"date":"2024-04-12T14:39:02","date_gmt":"2024-04-12T14:39:02","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/35779\/LockBit-Copycat-DarkVault-Spurs-Rebranding-Rumor.html"},"modified":"2024-04-12T14:39:02","modified_gmt":"2024-04-12T14:39:02","slug":"lockbit-copycat-darkvault-spurs-rebranding-rumor","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/lockbit-copycat-darkvault-spurs-rebranding-rumor\/","title":{"rendered":"LockBit Copycat DarkVault Spurs Rebranding Rumor"},"content":{"rendered":"<div><img decoding=\"async\" src=\"https:\/\/files.scmagazine.com\/wp-content\/uploads\/2024\/04\/AdobeStock_319434019.jpg\" class=\"ff-og-image-inserted\"><\/div>\n<p>DarkVault, a new ransomware group with a website resembling LockBit\u2019s, may be the latest in a string of copycats mimicking the notorious ransomware-as-a-service (RaaS) gang. &nbsp;<\/p>\n<p>Security researcher Dominic Alvieri <a href=\"https:\/\/twitter.com\/AlvieriD\/status\/1778120199218029027\" target=\"_blank\" rel=\"noreferrer noopener\">called attention<\/a> to a redesign of DarkVault\u2019s website on Wednesday. Alvieri\u2019s post on X included a screenshot of a new homepage sporting LockBit\u2019s distinctive style, including a red and white color scheme and similar page headings.<\/p>\n<p>LockBit\u2019s logo was also found on the DarkVault blog. The group\u2019s older website features an image of a black cat lying on a vault, potentially a reference to another ransomware gang, ALPHV\/BlackCat.<\/p>\n<p><a href=\"https:\/\/cybernews.com\/news\/lockbit-dark-vault-rebrand\/\" target=\"_blank\" rel=\"noreferrer noopener\">Cybernews reported<\/a> that DarkVault may be an attempt by LockBit to rebrand, but Alvieri later clarified that the intention of his post was to make fun of the \u201ccopycats.\u201d<\/p>\n<p>DarkVault had posted nine alleged victims on its LockBit imitation site as of Thursday, <a href=\"https:\/\/x.com\/DarkWebInformer\/status\/1778390130966822953\" target=\"_blank\" rel=\"noreferrer noopener\">according to Dark Web Informer<\/a>, which previously discovered the older DarkVault website with no victims listed on March 29.<\/p>\n<h2>LockBit imposters leverage leaked 2022 RaaS builder<\/h2>\n<p>DarkVault would not be the first cybercrime group to imitate LockBit, with several using LockBit\u2019s name, branding and leaked ransomware builder in their own attacks.<\/p>\n<p>Trellix noted this trend in a <a href=\"https:\/\/www.trellix.com\/blogs\/research\/the-lockbits-attempt-to-stay-relevant-its-imposters-and-new-opportunistic-ransomware-groups\/\" target=\"_blank\" rel=\"noreferrer noopener\">blog published Thursday<\/a>, which also described the partial revival of the original LockBit since its <a href=\"https:\/\/www.scmagazine.com\/news\/lockbit-gang-hobbled-by-international-takedown\" target=\"_blank\" rel=\"noreferrer noopener\">infrastructure was disrupted by law enforcement <\/a>in February. &nbsp;<\/p>\n<p>The builder for the LockBit 3.0 ransomware, also known as LockBit Black, was leaked by one of the gang\u2019s own developers in 2022 \u2013 since then, many threat actors have <a href=\"https:\/\/www.scmagazine.com\/news\/lockbit-code-leak-sparks-wave-of-raas-attacks\" target=\"_blank\" rel=\"noreferrer noopener\">used the builder in their own attacks.<\/a><\/p>\n<p>Some use the code as-is with minimal changes, such as the addition of their own version of the ransom note, while others have used the builder as a foundation for new ransomware strains, the researchers from Trellix\u2019s Advanced Research Center wrote.<\/p>\n<p>Dragonforce and Werewolves are two ransomware groups that emerged in 2023 using LockBit Black in their attacks. Dragonforce was found to be using the LockBit code as-is last September, with the exception of the ransom note, while Werewolves is believed to potentially have LockBit affiliates on its team due to overlap between victims claimed by both Werewolves and LockBit, according to Trellix.<\/p>\n<p>Some impersonators not only use LockBit\u2019s leaked code, but also copy the RaaS group\u2019s website in a similar fashion to DarkVault. In November 2023, a group called Spacecolon set up a fake LockBit leak site on the surface web and used the LockBit name in its contact details when attempting to extort victims, <a href=\"https:\/\/www.trendmicro.com\/en_us\/research\/24\/b\/lockbit-attempts-to-stay-afloat-with-a-new-version.html\" target=\"_blank\" rel=\"noreferrer noopener\">according to Trend Micro<\/a>.<\/p>\n<p>LockBit\u2019s name was also used in an attack on Russian security company AN-Security in January, which was later disputed by LockBit admin \u201cLockBitSupp,\u201d who pointed out that the group doesn\u2019t target Russian companies.<\/p>\n<p>LockBitSupp ultimately blamed the attack on Cl0p RaaS owner \u201cSignature,\u201d claiming the rival threat actor was attempting to besmirch LockBit\u2019s name in retaliation for a recent feud. &nbsp;<\/p>\n<p>\u201cThe emergence of imposters of LockBit and opportunistic ransomware groups utilizing the leaked LockBit builder highlighted the complexities of threat actor attribution and ongoing challenges posed by the widespread availability of ransomware,\u201d the Trellix researchers stated.<\/p>\n<h2>LockBit gang returns with limited capabilities<\/h2>\n<p>Since its February takedown, LockBit has reemerged with a limited restoration of its infrastructure, most recently being observed by the Trellix Advanced Research Center attempting to exploit ScreenConnect vulnerabilities.<\/p>\n<p>The group has disabled RaaS panel access for some of its less profitable affiliates, requiring a fee of 1 or 2 BTC (about $70,000 to $140,000 USD) from those who want to rejoin in order to help prevent law enforcement, journalists and competing threat actors from gaining access, according to Trellix.<\/p>\n<p>LockBit has also split its affiliate panel into multiple servers to minimize the impact of further law enforcement interference after the source code for the panel was seized as part of international takedown operation. &nbsp;<\/p>\n<p>Signs that the gang has yet to fully recover from the takedown include adding and removing several unconfirmed victims to its leak site, which may be done to artificially inflate the group\u2019s activity, as well as the apparent removal of anti-DDoS protection from its site, \u201csuggesting a potential lapse in LockBit\u2019s defensive capabilities,\u201d Trellix said.<\/p>\n<p>READ MORE <a href=\"https:\/\/packetstormsecurity.com\/news\/view\/35779\/LockBit-Copycat-DarkVault-Spurs-Rebranding-Rumor.html\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":55827,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[277],"tags":[8372],"class_list":["post-55826","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity-blogs","tag-headlinehackermalwarecybercrimefraudcryptography"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>LockBit Copycat DarkVault Spurs Rebranding Rumor 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/lockbit-copycat-darkvault-spurs-rebranding-rumor\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"LockBit Copycat DarkVault Spurs Rebranding Rumor 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/lockbit-copycat-darkvault-spurs-rebranding-rumor\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2024-04-12T14:39:02+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/files.scmagazine.com\/wp-content\/uploads\/2024\/04\/AdobeStock_319434019.jpg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/lockbit-copycat-darkvault-spurs-rebranding-rumor\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/lockbit-copycat-darkvault-spurs-rebranding-rumor\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"LockBit Copycat DarkVault Spurs Rebranding Rumor\",\"datePublished\":\"2024-04-12T14:39:02+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/lockbit-copycat-darkvault-spurs-rebranding-rumor\\\/\"},\"wordCount\":708,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/lockbit-copycat-darkvault-spurs-rebranding-rumor\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/04\\\/lockbit-copycat-darkvault-spurs-rebranding-rumor.jpg\",\"keywords\":[\"headline,hacker,malware,cybercrime,fraud,cryptography\"],\"articleSection\":[\"CyberSecurity Blogs\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/lockbit-copycat-darkvault-spurs-rebranding-rumor\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/lockbit-copycat-darkvault-spurs-rebranding-rumor\\\/\",\"name\":\"LockBit Copycat DarkVault Spurs Rebranding Rumor 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/lockbit-copycat-darkvault-spurs-rebranding-rumor\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/lockbit-copycat-darkvault-spurs-rebranding-rumor\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/04\\\/lockbit-copycat-darkvault-spurs-rebranding-rumor.jpg\",\"datePublished\":\"2024-04-12T14:39:02+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/lockbit-copycat-darkvault-spurs-rebranding-rumor\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/lockbit-copycat-darkvault-spurs-rebranding-rumor\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/lockbit-copycat-darkvault-spurs-rebranding-rumor\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/04\\\/lockbit-copycat-darkvault-spurs-rebranding-rumor.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/04\\\/lockbit-copycat-darkvault-spurs-rebranding-rumor.jpg\",\"width\":800,\"height\":450},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/lockbit-copycat-darkvault-spurs-rebranding-rumor\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"headline,hacker,malware,cybercrime,fraud,cryptography\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/tag\\\/headlinehackermalwarecybercrimefraudcryptography\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"LockBit Copycat DarkVault Spurs Rebranding Rumor\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"LockBit Copycat DarkVault Spurs Rebranding Rumor 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/lockbit-copycat-darkvault-spurs-rebranding-rumor\/","og_locale":"en_US","og_type":"article","og_title":"LockBit Copycat DarkVault Spurs Rebranding Rumor 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/lockbit-copycat-darkvault-spurs-rebranding-rumor\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2024-04-12T14:39:02+00:00","og_image":[{"url":"https:\/\/files.scmagazine.com\/wp-content\/uploads\/2024\/04\/AdobeStock_319434019.jpg","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/lockbit-copycat-darkvault-spurs-rebranding-rumor\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/lockbit-copycat-darkvault-spurs-rebranding-rumor\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"LockBit Copycat DarkVault Spurs Rebranding Rumor","datePublished":"2024-04-12T14:39:02+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/lockbit-copycat-darkvault-spurs-rebranding-rumor\/"},"wordCount":708,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/lockbit-copycat-darkvault-spurs-rebranding-rumor\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2024\/04\/lockbit-copycat-darkvault-spurs-rebranding-rumor.jpg","keywords":["headline,hacker,malware,cybercrime,fraud,cryptography"],"articleSection":["CyberSecurity Blogs"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/lockbit-copycat-darkvault-spurs-rebranding-rumor\/","url":"https:\/\/www.threatshub.org\/blog\/lockbit-copycat-darkvault-spurs-rebranding-rumor\/","name":"LockBit Copycat DarkVault Spurs Rebranding Rumor 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/lockbit-copycat-darkvault-spurs-rebranding-rumor\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/lockbit-copycat-darkvault-spurs-rebranding-rumor\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2024\/04\/lockbit-copycat-darkvault-spurs-rebranding-rumor.jpg","datePublished":"2024-04-12T14:39:02+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/lockbit-copycat-darkvault-spurs-rebranding-rumor\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/lockbit-copycat-darkvault-spurs-rebranding-rumor\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/lockbit-copycat-darkvault-spurs-rebranding-rumor\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2024\/04\/lockbit-copycat-darkvault-spurs-rebranding-rumor.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2024\/04\/lockbit-copycat-darkvault-spurs-rebranding-rumor.jpg","width":800,"height":450},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/lockbit-copycat-darkvault-spurs-rebranding-rumor\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"headline,hacker,malware,cybercrime,fraud,cryptography","item":"https:\/\/www.threatshub.org\/blog\/tag\/headlinehackermalwarecybercrimefraudcryptography\/"},{"@type":"ListItem","position":3,"name":"LockBit Copycat DarkVault Spurs Rebranding Rumor"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/55826","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=55826"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/55826\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/55827"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=55826"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=55826"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=55826"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}