lockbit5
ransomware group · aka LockBit 5.0, LockBit, LockBit 4.0, LockBit Black (LockBit 3.0 branding), Bitwise Spider (operator-side branding) · Russia (suspected); alleged leader 'LockBitSupp' identified as Russian national Dmitry Khoroshev per U.S. DOJ (2024) · active since Original LockBit first observed September 2019; 'LockBit 5.0' branding reported by vendors in 2025; exact 5.0 first-observed date unknown; this dashboard's leak-site tracking began 2026-09-04
Victims · 7d
5▼1
Victims · 30d
27active targets
Victims · 90d
86
All-time (tracked)
360since 2025-12-05
Last post
09-14 18:42UTC
Estimated earnings
Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit…public reporting
Profile · glm-5.3-flash · updated
LockBit 5.0 is the latest version of the long-running LockBit ransomware-as-a-service brand, one of the most prolific RaaS operations observed since 2019. The operation uses an affiliate model and double extortion, publishing non-paying victims and stolen data on its leak site, consistent with the victim cadence tracked here. In February 2024, international law enforcement (Operation Cronos, FBI/NCA and partners) seized servers and disrupted the group, and the U.S. DOJ subsequently identified alleged leader LockBitSupp as Russian national Dmitry Khoroshev. LockBit continued operating after the disruption, with vendor reporting through 2025 describing ongoing victim postings; technical details unique to the 5.0 encryptor are not well documented publicly. Well-documented tradecraft includes VPN and edge-device exploitation for initial access, the custom StealBit exfiltration tool, and pressure tactics such as countdown timers on its leak site.
Tactics & tooling
- Double extortion: file encryption plus data exfiltration with leak-site publication
- Ransomware-as-a-service affiliate model with recruited access brokers
- Initial access via exploited VPN and edge devices, and stolen credentials (per CISA/FBI #StopRansomware advisories)
- Exploitation of known vulnerabilities, including FortiOS, Zerologon, PrintNightmare, Follina, and Citrix Bleed
- Custom StealBit exfiltration tool; loader-based delivery (e.g., QakBot) observed in affiliate intrusions per vendor reporting
- Intermittent encryption for speed; disables security software, deletes shadow copies, reboots into safe mode (per CISA/FBI advisories)
- Leak-site pressure tactics: countdown timers, victim shaming, reposting of non-payers
Targeted sectors
manufacturingprofessional and legal serviceshealthcareconstruction and engineeringfinancial servicestransport and logisticsIT and managed services
Notable public victims
Royal Mail Group (UK postal service; 2022-2023), Boeing (2023; intrusion linked to Citrix Bleed, CVE-2023-4966), ICBC Financial Services (2023), Continental AG (2022), Accenture (2021), TSMC (2023; via supplier Kinmax per public reporting), Bridgestone Americas (2022)
CVEs linked to their intrusions
Estimated earnings
Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit… — Public reporting: U.S. DOJ/UK NCA joint announcement on Operation Cronos (February 2024); no verified public figure specific to version 5.0.
Leak-site victims360 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| mediaservicemaastricht.nl | · Jul 10, 2026 | Media Service Maastricht is a professional team specializing in audiovisual services, offering tailo... |
| ravagnan.com | · Jul 10, 2026 | the RAVAGNAN GROUP employs about 250 people in Italy, and many more in Latin America. E’ specialized... |
| sweetome.com | · Jun 18, 2026 | Operator of hotel chain brand and provider of real estate operation and management services. The com... |
| probat.ag | · Jun 18, 2026 | PROBAT Bau AG is a leading construction company based in Munich, Ingolstadt, and Upper Bavaria, spec... |
| delano.k12.mn.us | · Jun 18, 2026 | Delano Public Schools is dedicated to providing systemic growth toward educational excellence for ev... |
| eternal.hk | · Jun 18, 2026 | Eternal Beauty Holdings Limited is the largest perfume group in China, including Hong Kong and Macau... |
| 5deagosto.com.br | · Jun 18, 2026 | 5 de Agosto is a national leader in the distribution of automotive parts, offering integrated soluti... |
| abandw.com | · Jun 18, 2026 | AB&W Innovation Co., Ltd еhe aluminum door and window system industry. |
| ag-360.ca | · Jun 18, 2026 | With customer experience at the heart of our values, AG360, land surveyors, relies on the collaborat... |
| elematic.com | · Jun 18, 2026 | Elematic Oyj is a global leader in precast concrete technology. With over 65 years of experience, th... |
| amc.co.th | · Jun 18, 2026 | We provide maintenance services of motors, generators, pumps, dynamic balance turbines, and blowers.... |
| casaandina.com.co | · Jun 18, 2026 | We are the premier hardware and construction material distributor serving the southwestern region of... |
| bvi.co.bw | · Jun 18, 2026 | The Botswana Vaccine Institute (BVI) is a trusted animal pharmaceutical organization with over 45 ye... |
| comta.com.tw | · Jun 18, 2026 | Founded in 1990 as a specialist in mold design and manufacturing, Como (Comta) has evolved into a gl... |
| daikyonishikawa.co.jp | · Jun 18, 2026 | DaikyoNishikawa Corporation (DNC) is a comprehensive, proposal-based plastic products manufacturer a... |
| rubbercompounding.com | · Jun 18, 2026 | DRC is a custom mixing company with more than 45 years of experience, supplying high-performance rub... |
| drwu.com | · Jun 18, 2026 | Founded in 2003 by Dr. Wu, Asia’s highly reputable dermatology professor, and his eldest son Eric Wu... |
| felizhotelboracay.com | · Jun 18, 2026 | Feel the Tranquility and ComfortFeliz Hotel Boracay provides a serene island retreat with spacious,... |
| greyhighschool.com | · Jun 18, 2026 | Grey remains as one of the leading schools in the country, with a culture and value system that supp... |
| idefeey.yucatan.gob.mx | · Jun 18, 2026 | The Institute for the Development and Certification of Educational and Electrical Physical Infrastru... |
| inspeqingenieria.com | · Jun 18, 2026 | Consulting and Inspection of Destructive and Non-Destructive Testing: We guarantee the integrity of... |
| majorcineplex.com | · Jun 18, 2026 | Major Cineplex is the largest operator of movie theaters in Thailand and Laos, commanding a massive... |
| parkviewtaipei.com | · Jun 18, 2026 | Simplistic style and meticulous service, creating a simple yet complex intimacy.Parkview Taipei cate... |
| ponce-benzo.com | · Jun 18, 2026 | We are dedicated to the manufacture and marketing of our own and third-party products in the mass co... |
| parampackaging.com | · Jun 18, 2026 | The Print & Pack group based at Mumbai – India, is a leading manufacturer of top quality printed pac... |
| primelinkbio.com | · Jun 18, 2026 | PrimeLink BioTherapeutics is an innovative ADC (Antibody-Drug Conjugate) biotechnology company dedic... |
| saico.co.th | · Jun 18, 2026 | SAICO selects premium natural ingredients to ensure the highest quality standards. The fresh ingredi... |
| sanatoriodelta.com | · Jun 18, 2026 | Sanatorio Delta is a prominent private medical institution of high complexity with more than 40 year... |
| saude.mt.gov.br | · Jun 18, 2026 | The State Secretariat of Health of Mato Grosso (SES-MT) serves as the primary executive body of the... |
| sparkinter.com | · Jun 18, 2026 | Spark Intertrade Co., Ltd., established in 1987, imports and wholesales electronic equipment, camera... |
| sra.nl | · Jun 18, 2026 | With this new dossier, SRA helps you make inclusivity practical, with extra attention to neurodiverg... |
| teleton.org.hn | · Jun 18, 2026 | We are a leading private non-profit institution in the field of comprehensive rehabilitation. With t... |
| union-chemical.co.th | · Jun 18, 2026 | Company is a prominent manufacturer specializing in Food Grade and Pharmaceutical Grade ethanol (min... |
| venelectronics.com | · Jun 18, 2026 | Venelectronics, through its website, offers online sales of a wide range of electronic products, hou... |
| weinwurm.cc | · Jun 18, 2026 | Weinwurm – Your Partner for Agricultural Products, Grain & Construction MaterialsWe are an independe... |
| nundungopee.mu | · Jun 18, 2026 | (mt) Media Temple, Inc. specializes in business-class web hosting solutions designed to scale with t... |
| shottermill-jun.surrey.sch.uk | · Jun 9, 2026 | Shottermill Junior School Shottermill Junior School is a primary educational institution located in... |
| columbiaorthogroup.com | · Jun 9, 2026 | Columbia Orthopaedic Group is a healthcare provider located in mid-Missouri that specializes in the... |
| vth.nl | · Jun 9, 2026 | Van Tuijl Support your growth Van Tuijl is a family business that has been supplying agricultural... |
| implosa.com | · Jun 9, 2026 | A Panamanian company engaged in the wholesale and retail trade of construction supplies, plumbing fi... |
| groupe-mbm.com | · Jun 9, 2026 | Groupe MBM is a French group of companies specializing in carpentry, interior finishing, and interio... |
| scbgroup.com.sg | · Jun 9, 2026 | SCB Group (formerly Jian Huang Group) is a Singapore-based construction company founded in 1996. It... |
| sumerfaktoring.com | · Jun 9, 2026 | A Turkish financial company that provides factoring services (financing and management of accounts r... |
| hollandbulbfarms.com | · Jun 9, 2026 | Holland Bulb Farms is an online store specializing in bulbs, rhizomes, and seedlings The downloaded... |
| hgs-wt.at | · Jun 9, 2026 | An Austrian company based in Wels that provides audit, tax, and business consulting services to corp... |
| grupodetoni.com.br | · Jun 9, 2026 | grupodetoni.com.br Brazilian agribusiness group engaged in sugarcane cultivation and the production... |
| dobarro.com.uy | · Jun 9, 2026 | DOBARRO & PICHEL is a Uruguayan company specializing in the sale and maintenance of heating, air con... |
| helios.com.bo | · Jun 9, 2026 | Helios is a Bolivian company that provides measurement and metrology solutions, including the sale o... |
| wessels.group | · Jun 9, 2026 | Mission & Vision The focus of Wessels Logistics is on 24-hour transport in the Benelux and Germany,... |
| sierravistahospital.com | · Jun 9, 2026 | Sierra Vista Hospital is a private behavioral health facility located in Sacramento, California, off... |
In the newsAll →
No articles mention this group yet.
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .