SURGe Tests LockBit’s Claim of the Fastest Ransomware Encryption Speed

You may have seen the whitepaper from Splunk SURGe that compares ransomware encryption speeds for groups like Conti, Babuk, and REvil. Today we have even more research to share. For the original whitepaper (linked below), SURGe member Shannon Davis tested how fast 100 ransomware binaries each encrypted 100,000 files. But before he got started, he noticed the only existing data on encryption speeds was from one of the ransomware groups themselves. LockBit released their own findings on the dark web, claiming their ransomware was the fastest compared to 34 other criminal groups. LockBit even provided links to download the ransomware samples used in their tests.