cronos

groups.json

@@ -3026,7 +3026,7 @@
                 "fqdn": "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion",
                 "title": null,
                 "version": 3,
-                "slug": "http://lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion",
+                "slug": "http://lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion/page2.html",
                 "available": true,
                 "updated": "2024-02-20 11:16:07.337816",
                 "lastscrape": "2024-02-20 11:16:07.337805",

parsers.py

@@ -657,14 +657,27 @@ def cheers():
 
 def lockbit3():
     stdlog('parser: ' + 'lockbit3')
+    # grep '<div class="post-title">' source/lockbit3-*.html -C 1 --no-filename | grep '</div>' | cut -d '<' -f 1 | sed -e 's/^ *//g' -e 's/[[:space:]]*$//' | sort --uniq | tr '[:upper:]' '[:lower:]'
     parser = '''
-    grep '<div class="post-title">' source/lockbit3-*.html -C 1 --no-filename | grep '</div>' | cut -d '<' -f 1 | sed -e 's/^ *//g' -e 's/[[:space:]]*$//' | sort --uniq | tr '[:upper:]' '[:lower:]'
+    grep --no-filename '<div class="post-title">' source/lockbit3-*.html | cut -d '>' -f 2 | cut -d '<' -f 1 | sed -e 's/^ *//g' -e 's/[[:space:]]*$//'
     '''
     posts = runshellcmd(parser)
     if len(posts) == 1:
         errlog('lockbit3: ' + 'parsing fail')
     for post in posts:
         appender(post, 'lockbit3')
+
+def lockbit3fs():
+    stdlog('parser: ' + 'lockbit3fs')
+    parser = '''
+    grep --no-filename '<tr><td class="link">' source/lockbit3_fs-*.html | cut -d '"' -f 6
+    '''
+    posts = runshellcmd(parser)
+    if len(posts) == 1:
+        errlog('lockbit3fs: ' + 'parsing fail')
+    for post in posts:
+        # note: appends rec as lb3 (excludes fs)
+        appender(post, 'lockbit3')
 
 def yanluowang():
     stdlog('parser: ' + 'yanluowang')

ransomwatch.py

@@ -296,4 +296,5 @@ def appender(name, location):
     parsers.ransomblog_noname2()
     parsers.alphalocker()
     parsers.ransomhub()
+    #parsers.lockbit3fs()
     stdlog('ransomwatch: ' + 'parse run complete')