ZeroHour

lockbit5

ransomware group · aka LockBit 5.0, LockBit, LockBit 4.0, LockBit Black (LockBit 3.0 branding), Bitwise Spider (operator-side branding) · Russia (suspected); alleged leader 'LockBitSupp' identified as Russian national Dmitry Khoroshev per U.S. DOJ (2024) · active since Original LockBit first observed September 2019; 'LockBit 5.0' branding reported by vendors in 2025; exact 5.0 first-observed date unknown; this dashboard's leak-site tracking began 2026-09-04

Victims · 7d
5▼1
Victims · 30d
27active targets
Victims · 90d
86
All-time (tracked)
360since 2025-12-05
Last post
09-14 18:42UTC
Estimated earnings
Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit…public reporting
Profile · glm-5.3-flash · updated

LockBit 5.0 is the latest version of the long-running LockBit ransomware-as-a-service brand, one of the most prolific RaaS operations observed since 2019. The operation uses an affiliate model and double extortion, publishing non-paying victims and stolen data on its leak site, consistent with the victim cadence tracked here. In February 2024, international law enforcement (Operation Cronos, FBI/NCA and partners) seized servers and disrupted the group, and the U.S. DOJ subsequently identified alleged leader LockBitSupp as Russian national Dmitry Khoroshev. LockBit continued operating after the disruption, with vendor reporting through 2025 describing ongoing victim postings; technical details unique to the 5.0 encryptor are not well documented publicly. Well-documented tradecraft includes VPN and edge-device exploitation for initial access, the custom StealBit exfiltration tool, and pressure tactics such as countdown timers on its leak site.

Tactics & tooling
  • Double extortion: file encryption plus data exfiltration with leak-site publication
  • Ransomware-as-a-service affiliate model with recruited access brokers
  • Initial access via exploited VPN and edge devices, and stolen credentials (per CISA/FBI #StopRansomware advisories)
  • Exploitation of known vulnerabilities, including FortiOS, Zerologon, PrintNightmare, Follina, and Citrix Bleed
  • Custom StealBit exfiltration tool; loader-based delivery (e.g., QakBot) observed in affiliate intrusions per vendor reporting
  • Intermittent encryption for speed; disables security software, deletes shadow copies, reboots into safe mode (per CISA/FBI advisories)
  • Leak-site pressure tactics: countdown timers, victim shaming, reposting of non-payers
Targeted sectors
manufacturingprofessional and legal serviceshealthcareconstruction and engineeringfinancial servicestransport and logisticsIT and managed services
Notable public victims

Royal Mail Group (UK postal service; 2022-2023), Boeing (2023; intrusion linked to Citrix Bleed, CVE-2023-4966), ICBC Financial Services (2023), Continental AG (2022), Accenture (2021), TSMC (2023; via supplier Kinmax per public reporting), Bridgestone Americas (2022)

Estimated earnings

Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit… — Public reporting: U.S. DOJ/UK NCA joint announcement on Operation Cronos (February 2024); no verified public figure specific to version 5.0.

Leak-site victims

VictimDiscoveredDetails
tpi.tw · 1d agoManaging a company is a constant process of managing change, solving problems and facing up to chall...
comune.robeccosulnaviglio.mi.it · 1d agoComune di Robecco sul Naviglio is a municipality in the Metropolitan City of Milan
httoy.fi · 1d agoTilitoimisto HTT Oy Tilitoimisto HTT Oy on Raumassa toimiva kirjanpitäjä, joka tarjoaa taloushallin...
alphaomega-eng.com · 5d agoIn 1993, Alpha Omega was established as a small engineering firm in Nazareth, Israel, by Imad Younis...
amorsaude.com.br · 5d agoAmorSaúde is a rapidly growing network of popular clinics in Brazil that offers medical, dental, and...
fdcputman.nl · 7d agoFDC Putman is a financial specialist offering tailored advice on mortgages, insurance, and various f...
contreras.com.ar · 7d agoFounded in 1947 by the Contreras brothers, the company has continuously evolved and modernized, focu...
vsbattorneys.co.za · 7d agoVSB Attorneys Inc is a well-established law firm in South Africa, specializing in corporate and comm...
kalahealth.eu · 11d agoKALA Health is an international manufacturing and distribution company of nutraceutical health produ...
huisartsencentrumkleiniterson.nl · 11d agoHuisartsencentrum Klein Iterson is a Healthcare Services provider operating in the primary medical c...
pscindustries.com · 11d agoFor over 60 years, PSC Industries has been the number 1 supplier of nsulation, gasketing, seals, adh...
svfcu.org · 15d agoSusquehanna Valley Federal Credit Union is a member-owned financial institution that offers a range...
hoaattorneys.com · 15d agoFor more than 40 years, Beaumont Tashjian has provided common interest developments with the legal e...
bartelsbv.nl · 15d agoBartels BV is reeds 40 jaar een toonaangevend bedrijf op het gebied van metalen gevels, daken en lic...
vkj.nl · 15d agoVan Kessel & Janssen begeleidt huisvestingsprojecten met deskundig advies en projectmanagement. Van...
allsteelproducts.nl · 15d agoAll Steel Products is a wholesale supplier specializing in hydraulic products, offering a wide range...
bkc.org · 15d agobkc.org and bethelclassical.org Mission Statement Bethel Classical Academy seeks to guide studen...
apatpa.com · 17d agoAmerican Plan Administrators offers smart self-funded healthcare solutions designed to maximize savi...
tnmed.org · 18d agoThe Tennessee Medical Association is a nonprofit organization that advocates for physicians in Tenne...
fpmanagement.nl · 19d agoFP Management BV is a licensed trust office based in Rotterdam, Netherlands, offering a range of ser...
takt.be · 19d agoDe notaris: de onpartijdige en onafhankelijke raadgever bij uitstek Sinds jaar en dag staat een e...
dece.cz · 19d agoDeCe COMPUTERS s.r.o. specializes in comprehensive computer and office management solutions, offerin...
theheartcenterofmemphis.com · 19d agoThe Heart Center of Memphis is a leading cardiology practice in the Mid-South, specializing in compr...
adt.com · 23d agoADT is a security company that offers security systems, cameras, alarms ad home automation services....
icnavais.com · 24d agoThe Itaguaí Construções Navais S.A. known as ICN, is a Brazilian state-owned defence company special...
usbank.com · 26d agoU.S. Bank is a multinational financial institution that provides banking, lending, payment, and inve...
terra-petra.com · 29d agoTerra-Petra is an environmental engineering firm specializing in contaminated soil and groundwater c...
actua.fr · Aug 16, 2026Groupe Actua is a recruitment and temporary staffing agency headquartered in Strasbourg, founded in...
dupouy-associes.fr · Aug 16, 2026Dupouy et Associes - Crowe Horwath is a company that operates in the Accounting Services industry.
agricolagalbusera.it · Aug 16, 2026The Galbusera Agricultural Company Greenhouse-grown leafy vegetables Here, with dedication and p...
tecosim.com · Aug 16, 2026TECOSIM is a technology corporation specializing in computer-aided engineering (CAE). They are headq...
vgrn.de · Aug 16, 2026Verbandsgemeinde Rhein-Nahe is a company that operates in the Government industry.
briggsplc.com · Aug 5, 2026Briggs began operations in 1740. As a well-known UK-based company in the engineering equipment indus...
sirsa.it · Aug 2, 2026SIRSA operates in the field of processing and molding plastic materials, offering concrete, safe, an...
sms-sme.com · Aug 2, 2026SMS-SME is a global leader in marine cargo access and securing equipment, specializing in RORO equip...
adventusasia.com · Aug 2, 2026Adventus is a Top-Rated Information and Communications Technology (ICT) Solutions and Services Provi...
pcclimitedindia.com · Aug 2, 2026PIONEER COLDSTORE & CLADDING PVT. LTD. (PCC) is Leading Manufactures of insulated Panels for Coldsto...
delkartindustries.com · Aug 2, 2026Delkart Industries Limited specializes in manufacturing high-quality custom felts, automobile carpet...
micropack.com.ar · Aug 2, 2026Micropack is a well-known food and household goods distributor that has been serving businesses and...
setic-pourtier.com · Aug 2, 2026Consolidating gains and preparing the future, Setic, Pourtier C2S help you to stay ahead of the prod...
microphase.com · Aug 2, 2026Microphase Corporation is an innovative and trusted customer-driven supplier of advanced electronic...
rai.com.br · Aug 2, 2026Grupo Rái is one of the largest independent communication groups in Brazil, consisting of six specia...
utb.edu.vn · Jul 10, 2026The school's mission is to train human resources at the undergraduate and postgraduate levels;...
bancrofteng.com · Jul 10, 2026Bancroft Engineering specializes in the design and manufacturing of automated welding equipment and...
magna.com.do · Jul 10, 2026Magna Dominicana has over 50 years of experience offering globally recognized vehicle brands, specia...
giesdl.de · Jul 10, 2026Die Gies Dienstleistungen GmbH ist ein deutsches Gebäudedienstleistungsunternehmen. Sie hat 19 Niede...
jshotels.com · Jul 10, 2026JS Hotels owns and manages ten hotel properties scattered all over Majorca. We pride ourselves on cu...
hotel-bourse.com · Jul 10, 202614 rue de la Bourse 68100 Mulhouse [email protected] +33 3 89 56 18 44
abianchini.es · Jul 10, 2026Founded in 1908, BIANCHINI specializes in the manufacturing and marketing of galvanized steel wires...
comtri.de · Jul 10, 2026As a leading IT system house in the Stuttgart area, ComTRI GmbH is a highly qualified and trustworth...

In the newsAll →

No articles mention this group yet.

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .