As we’ve previously covered, Evil Corp’s and Lockbit’s activities have overlapped on-chain. Specifically, rebranded ransomware strains associated with Evil Corp and cryptocurrency clusters belonging to Lockbit have used the same deposit addresses at centralized exchanges, as shown in the below Chainalysis Reactor graph.

It's concerning to see the overlap between Evil Corp and Lockbit in their on-chain activities. The reuse of deposit addresses at centralized exchanges raises red flags. Collaboration between different cyber threat actors could lead to more sophisticated attacks. Stay vigilant and prioritize cybersecurity measures.