Skip to content
NewA calmer, faster ZeroHour

lockbit5

ransomware group · aka LockBit, LockBit 2.0, LockBit 3.0, LockBit Black, ABCD · Russian-speaking criminal ransomware-as-a-service; alleged administrator publicly identified by US and UK authorities in 2024 as a Russian national. Not reported as a state service. Whether LockBit 5 is the same operators is unknown. · active since 2019 (LockBit/ABCD); LockBit 5-specific first appearance unknown

  • Victims · 7d3−3 vs prior week
  • Victims · 30d23 
  • Victims · 90d65 
  • All-time (tracked)392since 2025-12-05
  • Last post11-01 16:25UTC
  • Estimated earnings>$120M ransom payments to LockBit affiliates (US DOJ, 2024); LockBit 5-specific total unknownpublic reporting
Profile · grok-4.7 · updated Summaries by Vani AI

LockBit is a long-running ransomware-as-a-service operation, first seen in 2019 as ABCD and later branded LockBit, LockBit 2.0, and LockBit 3.0 (Black). Affiliates handle intrusions and share profits with the operators, using double extortion via encryption and a data-leak site, with occasional extra pressure such as DDoS or contacting a victim's customers. In February 2024, Operation Cronos (NCA, FBI, Europol and partners) seized core infrastructure and authorities publicly identified the alleged administrator; some claiming activity continued afterward. A distinct 'LockBit 5' brand is not clearly separated in widely cited public reporting from that lineage, so operator continuity is unknown. Leak-site listings alone are not treated here as confirmed victims.

Tactics & tooling
  • Ransomware-as-a-service with independent affiliates
  • Initial access via stolen VPN/RDP credentials, phishing, and exploitation of exposed applications
  • Double extortion: file encryption plus threats to publish stolen data
  • Custom StealBit exfiltration utility reported in many intrusions
  • Common post-exploitation tools include Cobalt Strike, Mimikatz, PsExec, and Group Policy deployment
  • Later builders used partial/intermittent encryption to speed impact
  • Affiliate tradecraft varies; some add DDoS or direct outreach to customers and partners
Targeted sectors
manufacturingprofessional servicesfinancial serviceshealthcaregovernmentconstructiontransportation
Notable public victims

Royal Mail, Industrial and Commercial Bank of China (ICBC), Boeing, Accenture, Hospital for Sick Children (Toronto), MCNA Dental

Estimated earnings

>$120M ransom payments to LockBit affiliates (US DOJ, 2024); LockBit 5-specific total unknown — Figure is for the broader LockBit operation, not a LockBit 5-only total. US DOJ (February 2024) said LockBit actors had attacked more than 2,000 victims worldwide and received more than $120 million in ransom payments. No separate public…

Leak-site victims

392 posts · newest first
VictimDiscoveredDetails
synergy.co.id · 3h agoPT Synergy Risk Management Consultants (“SYNERGY”), an independent company, established in London,...
xspringcapital.com · 3d agoXSpring Capital Public Company Limited is a company that operates in the business of investing in va...
susannecerda.com · 3d agoDie Unternehmensgruppe Susanne Cerdá bietet nicht nur Dienstleistungen im Bereich Unternehmensgründu...
zelsior.es · 8d agoFounded in 2015, we have become the leading firm in comprehensive, technology-driven legal debt reco...
dorsiacademy.it · 9d agoART SCHOOL: Dove la Creatività Prende Forma Benvenuti in Art School, il luogo dove il talento incon...
mlh.com.lb · 9d agoMount Lebanon Hospital University Medical Center (MLHUMC) is a healthcare institution that offers a...
lidoway.com · 9d agoLido boutique hotel, with 100 rooms, shops, restaurants and gym, creates a comfortable and intimate...
istanbultrading.com · 10d agoIstanbul Foodstuff Trading Co LLC is a company that operates in the Computer Equipment & Peripherals...
chooseultimate.com · 12d agoUltimate Health Plans is a local Medicare Advantage Plan based in Spring Hill, Florida, serving vari...
ock.com.my · 15d agoOCK Group Berhad specializes in telco network services and infrastructure in Malaysia, offering solu...
karix.com · 17d agoKarix provides a mobile app that businesses can use to drive conversations, carry out transactions a...
torcivialaw.com · 17d agoTorcivia, Donlon, Goddeau & Rubin, P.A. continues to provide high quality, personalized, and practic...
kidzrkooldental.com · 17d agoKidz R Kool Pediatric Dentistry is a dental practice located in Peoria, AZ, specializing in pediatri...
lcww.com.eg · 17d agoتم إنشاء شركة مياه الشرب والصرف الصحي بالأقصر بقرار السيد المهندس وزير الإسكان والمرافق والتنمية ا...
neweramachines.com · 17d agoNew Era Machines is a leading manufacturer of biscuit and cookie production lines, recognized for it...
grupoabg.com · 17d agoGrupo ABG specializes in providing comprehensive solutions for organizations, focusing on business p...
kordhotels.gr · 18d agoWe are Santorineans. Kord hotels is the first hotel group in Santorini. Since 1972, we offer excell...
skycc.co.th · 19d agoSKY CC Company Limited is a leader in creating customer experience (CX) through comprehensive contac...
poolegroup.com.au · 22d agoPoole Group is a prominent accounting and business advisory firm located on the Sunshine Coast, offe...
saintpierredescorps.fr · 22d agoUne administration publique française. Voici les informations professionnelles et juridiques disp...
grunenwald.com · 25d agoGRUNENWALD Créateur français d'afficheurs sportifs haute performance depuis 1960, vous propose...
avsa.com.ar · 25d agoArgentina Valores S.A. is a financial services company focused on capital markets, registered with t...
capitalbankhaiti.biz · 27d agoCapital Bank SA provides a comprehensive range of traditional and online banking services tailored f...
consilio.com · Oct 1, 2026Consilio is a global legal software and services company that provides technology solutions for cros...
spg.co.kr · Sep 29, 2026SPG Co., Ltd specializes in a wide range of products including robot reducers, planetary gearheads,...
camorim.com.br · Sep 28, 2026Camorim Serviços Marítimos has over 30 years of expertise in the maritime sector, providing a range...
corisricambi.it · Sep 24, 2026Presenti sul territorio da oltre un ventennio, la CO.R.I.S. S.r.l. è cresciuta all'interno del...
anery.com.br · Sep 23, 2026Somos a Anery Home Care Temos paixão por cuidar Nossa especialidade é cuidar de pessoas, com todo o...
taspenlife.com · Sep 22, 2026Taspen Life offers a range of insurance products including health protection, group protection, and...
siinqeebank.com · Sep 21, 2026Siinqee Bank is a licensed Ethiopian financial institution that offers inclusive and innovative bank...
forus.cl · Sep 18, 2026Founded in 1980 and headquartered in Santiago, Chile, Forus is a provider of apparel. The company pr...
hygear.com · Sep 17, 2026yGear specializes in providing reliable and affordable on-site and on-demand hydrogen and industrial...
tpi.tw · Sep 14, 2026Managing a company is a constant process of managing change, solving problems and facing up to chall...
comune.robeccosulnaviglio.mi.it · Sep 14, 2026Comune di Robecco sul Naviglio is a municipality in the Metropolitan City of Milan
httoy.fi · Sep 14, 2026Tilitoimisto HTT Oy Tilitoimisto HTT Oy on Raumassa toimiva kirjanpitäjä, joka tarjoaa taloushallin...
alphaomega-eng.com · Sep 10, 2026In 1993, Alpha Omega was established as a small engineering firm in Nazareth, Israel, by Imad Younis...
amorsaude.com.br · Sep 10, 2026AmorSaúde is a rapidly growing network of popular clinics in Brazil that offers medical, dental, and...
fdcputman.nl · Sep 8, 2026FDC Putman is a financial specialist offering tailored advice on mortgages, insurance, and various f...
contreras.com.ar · Sep 8, 2026Founded in 1947 by the Contreras brothers, the company has continuously evolved and modernized, focu...
vsbattorneys.co.za · Sep 8, 2026VSB Attorneys Inc is a well-established law firm in South Africa, specializing in corporate and comm...
kalahealth.eu · Sep 4, 2026KALA Health is an international manufacturing and distribution company of nutraceutical health produ...
huisartsencentrumkleiniterson.nl · Sep 4, 2026Huisartsencentrum Klein Iterson is a Healthcare Services provider operating in the primary medical c...
pscindustries.com · Sep 4, 2026For over 60 years, PSC Industries has been the number 1 supplier of nsulation, gasketing, seals, adh...
svfcu.org · Aug 31, 2026Susquehanna Valley Federal Credit Union is a member-owned financial institution that offers a range...
hoaattorneys.com · Aug 31, 2026For more than 40 years, Beaumont Tashjian has provided common interest developments with the legal e...
bartelsbv.nl · Aug 31, 2026Bartels BV is reeds 40 jaar een toonaangevend bedrijf op het gebied van metalen gevels, daken en lic...
vkj.nl · Aug 31, 2026Van Kessel & Janssen begeleidt huisvestingsprojecten met deskundig advies en projectmanagement. Van...
allsteelproducts.nl · Aug 31, 2026All Steel Products is a wholesale supplier specializing in hydraulic products, offering a wide range...
bkc.org · Aug 31, 2026bkc.org and bethelclassical.org Mission Statement Bethel Classical Academy seeks to guide studen...
apatpa.com · Aug 29, 2026American Plan Administrators offers smart self-funded healthcare solutions designed to maximize savi...

In the news

All

No articles mention this group yet.

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .