lockbit5
ransomware group · aka LockBit 5.0, LockBit, LockBit 4.0, LockBit Black (LockBit 3.0 branding), Bitwise Spider (operator-side branding) · Russia (suspected); alleged leader 'LockBitSupp' identified as Russian national Dmitry Khoroshev per U.S. DOJ (2024) · active since Original LockBit first observed September 2019; 'LockBit 5.0' branding reported by vendors in 2025; exact 5.0 first-observed date unknown; this dashboard's leak-site tracking began 2026-09-04
Victims · 7d
5▼1
Victims · 30d
27active targets
Victims · 90d
86
All-time (tracked)
360since 2025-12-05
Last post
09-14 18:42UTC
Estimated earnings
Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit…public reporting
Profile · glm-5.3-flash · updated
LockBit 5.0 is the latest version of the long-running LockBit ransomware-as-a-service brand, one of the most prolific RaaS operations observed since 2019. The operation uses an affiliate model and double extortion, publishing non-paying victims and stolen data on its leak site, consistent with the victim cadence tracked here. In February 2024, international law enforcement (Operation Cronos, FBI/NCA and partners) seized servers and disrupted the group, and the U.S. DOJ subsequently identified alleged leader LockBitSupp as Russian national Dmitry Khoroshev. LockBit continued operating after the disruption, with vendor reporting through 2025 describing ongoing victim postings; technical details unique to the 5.0 encryptor are not well documented publicly. Well-documented tradecraft includes VPN and edge-device exploitation for initial access, the custom StealBit exfiltration tool, and pressure tactics such as countdown timers on its leak site.
Tactics & tooling
- Double extortion: file encryption plus data exfiltration with leak-site publication
- Ransomware-as-a-service affiliate model with recruited access brokers
- Initial access via exploited VPN and edge devices, and stolen credentials (per CISA/FBI #StopRansomware advisories)
- Exploitation of known vulnerabilities, including FortiOS, Zerologon, PrintNightmare, Follina, and Citrix Bleed
- Custom StealBit exfiltration tool; loader-based delivery (e.g., QakBot) observed in affiliate intrusions per vendor reporting
- Intermittent encryption for speed; disables security software, deletes shadow copies, reboots into safe mode (per CISA/FBI advisories)
- Leak-site pressure tactics: countdown timers, victim shaming, reposting of non-payers
Targeted sectors
manufacturingprofessional and legal serviceshealthcareconstruction and engineeringfinancial servicestransport and logisticsIT and managed services
Notable public victims
Royal Mail Group (UK postal service; 2022-2023), Boeing (2023; intrusion linked to Citrix Bleed, CVE-2023-4966), ICBC Financial Services (2023), Continental AG (2022), Accenture (2021), TSMC (2023; via supplier Kinmax per public reporting), Bridgestone Americas (2022)
CVEs linked to their intrusions
Estimated earnings
Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit… — Public reporting: U.S. DOJ/UK NCA joint announcement on Operation Cronos (February 2024); no verified public figure specific to version 5.0.
Leak-site victims360 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| seleniaravenna.it | · Apr 6, 2026 | Servizi all'avanguardia a Ravenna Nato nel 1992 dall'unione delle principali realtà coope... |
| aplast.ro | · Apr 6, 2026 | You are welcome in our offices across Central and Eastern Europe. With international presence since... |
| shunhinggroup.com | · Apr 6, 2026 | The Shun Hing Group (信興集團) is a prominent Hong Kong-based conglomerate founded in 1953, primarily kn... |
| earthprotect.co.jp | · Apr 6, 2026 | Earth Protect Co., Ltd Thinking about what we can do to protect and create tomorrow's global... |
| wibeats.it | · Apr 6, 2026 | WIBEATS is an independent Asset Management and Loans Service groups, highly specialised in the selec... |
| toncandigital.com | · Mar 21, 2026 | Obtenga impresión confiable y rápida para las tareas diarias de oficina con nuestra gama de impres... |
| ssskwt.com | · Mar 21, 2026 | Specialised Security Systems Co. (SSS) is a leading system integrator based in Kuwait, providing tur... |
| roamingnetworks.rs | · Mar 21, 2026 | Dot Networks has been present on the market since 2008, continuously growing in line with modern tre... |
| manchester.com.mx | · Mar 21, 2026 | Manchester inicia sus operaciones en el año 1939. Su fundador, Don Espiridion Canavati tiene la visi... |
| glop.mx | · Mar 21, 2026 | We are a firm of accountants specialized in the accounting and auditing area, with vast experience i... |
| flamagasindia.com | · Mar 21, 2026 | Flamagas India Pvt. Ltd. Address: 121/2C, Mambakkam Post, Mambakkam, Vandalur, Tamil Nadu - 600... |
| charliebears.com.au | · Mar 21, 2026 | Charlie Bears specializes in creating collectable and affordable teddy bears, each uniquely handcraf... |
| rovinj-rovigno.hr | · Mar 21, 2026 | The beautiful coast of Istria, contiguous to the Lim Canal, is where you will find the most romantic... |
| breastcare.com | · Mar 21, 2026 | Dr. John G. West is a pioneering general surgeon who established Orange County's first breast c... |
| jean.com.tw | · Mar 21, 2026 | Jean Co.,Ltd engages in the construction and development business in Taiwan. It operates through fou... |
| sidercentersas.com | · Mar 21, 2026 | La Sider Center sas opera nella sua sede di Marcianise, Zona Industriale Asi Sud. La struttura lavo... |
| sesi.org.br | · Mar 21, 2026 | SESI provides quality education, health, and cultural services aimed at improving the quality of lif... |
| senai.br | · Mar 21, 2026 | SENAI is a leading institution in professional education, offering a wide range of undergraduate, sp... |
| fiepe.org.br | · Mar 21, 2026 | Fiepe is an industrial organization that helps local businesses grow and succeed. They work directly... |
| luetz-binder.de | · Mar 21, 2026 | Bereits im Jahr 1972 gründete Bernd Lütz-Binder die Kanzlei in Landau in der Pfalz. Heute führt sein... |
| gov.krd | · Mar 21, 2026 | The Ministry of Higher Education and Scientific Research oversees higher education institutions in t... |
| ombudsman.gov.ws | · Mar 21, 2026 | Ombudsman Western Australia is an impartial and independent office serving the community by investig... |
| nandrin.be | · Mar 21, 2026 | Nandrin (French pronunciation: [nɑ̃dʁɛ̃]) is a municipality of Wallonia located in the province of L... |
| maritasdenim.com | · Mar 21, 2026 | Maritaş is a denim production company that emphasizes circularity, sustainability, and innovation in... |
| isoledilcappotti.it | · Mar 21, 2026 | La professionalità al Vostro servizio ISOLEDIL una garanzia di qualità ed esperienza... Grazie... |
| yaomazi.com | · Mar 13, 2026 | Yaomazi Food Co. LTD is located in Hongya, the hometown of Chinese green pepper. After more than 10... |
| omaxauto.com | · Mar 13, 2026 | OMAX Autos Limited is a leading manufacturer of sheet metal components, specializing in commercial v... |
| giunti.it | · Mar 13, 2026 | Giunti Editore, a historic Florentine publishing house—heir to a long publishing tradition that bega... |
| brassuco.com.br | · Mar 13, 2026 | Brassuco Alimentos has been a key player in the food industry since 1985. They make tasty drinks and... |
| diesel-electric.co.za | · Mar 13, 2026 | The Diesel-Electric Group including Bosch Service Dealers, e-CAR Service Centers and Bosch SA togeth... |
| emp.id | · Mar 13, 2026 | PT Energi Mega Persada Tbk (EMP's) is an independent upstream oil and gas company headquartered... |
| atrium.com | · Mar 13, 2026 | Since 1946 Atrium Windows and Doors has produced tens of millions of exceptional products throughout... |
| formula50.it | · Mar 13, 2026 | 成长、进化、决心。 Formula50是制药信息技术 领域的领导者，在国家层面开展业务，始终面向未来，将实现的每个目标视为征服新目标的激励因素。经验、毅力、野心。Formula50专门提供所有_ _... |
| paolidental.org | · Mar 13, 2026 | Il nostro team è il risultato di oltre 30 anni di esperienza, costruito con impegno e dedizione cost... |
| sportvision.ba | · Mar 13, 2026 | SportVision is a sports gear shop that helps athletes and fitness fans find exactly what they need.... |
| cti-bat.fr | · Mar 13, 2026 | THE COMPANY The company CTI BAT is a building company specialized in the sectors of activity: a... |
| praxis-oberhof.ch | · Mar 13, 2026 | Unser Leitbild Der Besuch in der Zahnarztpraxis als ein Glücksmoment: Fachlich bestens umsorgt, gu... |
| thaihua.com | · Mar 13, 2026 | Thai Hua Rubber Public Company Limited specializes in the production and distribution of natural rub... |
| landsteiner.net | · Mar 13, 2026 | Landsteiner Electrotechnik offers services such as Modernization of machine and equipment control sy... |
| barberopietro.it | · Mar 13, 2026 | Dal 1933 Barbero Pietro spa è sinonimo di imballaggio. Dai primi anni di lavoro in un settore agli e... |
| hb-technik.at | · Mar 13, 2026 | HB-Technik specializes in raw material automation solutions since 1973, offering a range of products... |
| tanufwater.com | · Mar 13, 2026 | Swathi Tetali is a Senior Account Manager at National Mineral Water Company SAOG, bringing expertise... |
| elmwoodhomecare.com | · Mar 13, 2026 | Elmwood Healthcare is a Medicare certified, nationally accredited home-based care organization opera... |
| townoforangeva.gov | · Mar 13, 2026 | The Town of Orange, Virginia, is the seat of Orange County and serves as its business center, offeri... |
| pkmsteel.com | · Mar 13, 2026 | PKM Steel Service, Inc. is a global producer of heavy and intermediate structural steel, specializin... |
| al-alawi.com | · Mar 13, 2026 | We work for you since 1967 Gulf Equipment & Technology (GET) is one of the divisions of Al Alawi Fa... |
| index-precast.com | · Mar 13, 2026 | INDEX Precast Co K.S.C.C is a pioneering company in the Kuwaiti precast market, specializing in the... |
| ikron.org | · Mar 13, 2026 | IKRON (Integration of Knowledge and Resources for Occupational Needs) was founded in 1969 as the Uni... |
| webster-schools.org | · Mar 13, 2026 | Webster Public Schools is a company that employs 250 to 499 people and has 10M to 25M of revenue. Th... |
| societaitalianaalimenti.it | · Mar 13, 2026 | Our group, with over 60 years of presence within the food production market, works mainly nearby the... |
In the newsAll →
No articles mention this group yet.
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .