lockbit5
ransomware group · aka LockBit 5.0, LockBit, LockBit 4.0, LockBit Black (LockBit 3.0 branding), Bitwise Spider (operator-side branding) · Russia (suspected); alleged leader 'LockBitSupp' identified as Russian national Dmitry Khoroshev per U.S. DOJ (2024) · active since Original LockBit first observed September 2019; 'LockBit 5.0' branding reported by vendors in 2025; exact 5.0 first-observed date unknown; this dashboard's leak-site tracking began 2026-09-04
Victims · 7d
5▼1
Victims · 30d
26active targets
Victims · 90d
52
All-time (tracked)
360since 2025-12-05
Last post
09-14 18:42UTC
Estimated earnings
Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit…public reporting
Profile · glm-5.3-flash · updated
LockBit 5.0 is the latest version of the long-running LockBit ransomware-as-a-service brand, one of the most prolific RaaS operations observed since 2019. The operation uses an affiliate model and double extortion, publishing non-paying victims and stolen data on its leak site, consistent with the victim cadence tracked here. In February 2024, international law enforcement (Operation Cronos, FBI/NCA and partners) seized servers and disrupted the group, and the U.S. DOJ subsequently identified alleged leader LockBitSupp as Russian national Dmitry Khoroshev. LockBit continued operating after the disruption, with vendor reporting through 2025 describing ongoing victim postings; technical details unique to the 5.0 encryptor are not well documented publicly. Well-documented tradecraft includes VPN and edge-device exploitation for initial access, the custom StealBit exfiltration tool, and pressure tactics such as countdown timers on its leak site.
Tactics & tooling
- Double extortion: file encryption plus data exfiltration with leak-site publication
- Ransomware-as-a-service affiliate model with recruited access brokers
- Initial access via exploited VPN and edge devices, and stolen credentials (per CISA/FBI #StopRansomware advisories)
- Exploitation of known vulnerabilities, including FortiOS, Zerologon, PrintNightmare, Follina, and Citrix Bleed
- Custom StealBit exfiltration tool; loader-based delivery (e.g., QakBot) observed in affiliate intrusions per vendor reporting
- Intermittent encryption for speed; disables security software, deletes shadow copies, reboots into safe mode (per CISA/FBI advisories)
- Leak-site pressure tactics: countdown timers, victim shaming, reposting of non-payers
Targeted sectors
manufacturingprofessional and legal serviceshealthcareconstruction and engineeringfinancial servicestransport and logisticsIT and managed services
Notable public victims
Royal Mail Group (UK postal service; 2022-2023), Boeing (2023; intrusion linked to Citrix Bleed, CVE-2023-4966), ICBC Financial Services (2023), Continental AG (2022), Accenture (2021), TSMC (2023; via supplier Kinmax per public reporting), Bridgestone Americas (2022)
CVEs linked to their intrusions
Estimated earnings
Over US$120 million in ransom payments received, per U.S. DOJ and UK NCA Operation Cronos announcement (February 2024). Earnings attributable to the LockBit… — Public reporting: U.S. DOJ/UK NCA joint announcement on Operation Cronos (February 2024); no verified public figure specific to version 5.0.
Leak-site victims360 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| audiconcontadores.com.br | · Mar 13, 2026 | Audicon Contadores specializes in providing reliable accounting and consulting solutions aimed at fo... |
| limpebras.com.br | · Mar 13, 2026 | Limpebras is a leading company in public cleaning services in Brazil, established in 2008. The compa... |
| commerfrutta.com | · Mar 13, 2026 | Commerfrutta is a trusted fruit and vegetable wholesaler based in Cerlongo di Goito, Mantova. They s... |
| facsrl.net | · Mar 13, 2026 | FAC S.R.L. is a company established in August 1999, specializing in crane rental, lifting services,... |
| alcornschools.org | · Mar 13, 2026 | Alcorn School District is dedicated to fostering a safe and positive learning environment that promo... |
| frasierlaw.com | · Mar 13, 2026 | Frasier, Frasier & Hickman, LLP is a law firm based in Tulsa, Oklahoma, founded in 1952, dedicated t... |
| cognitivehealthit.com | · Mar 13, 2026 | CognitiveHealth Technologies develops and deploys iCAN, a platform purpose-built for healthcare by e... |
| bassignanicave.it | · Mar 13, 2026 | L’attività dei BASSIGNANI nel settore Cave Ghiaia e Sabbia è iniziata alla fine degli anni ’50. Ind... |
| bardahl.com.mx | · Feb 20, 2026 | About Bardahl De México, SA De CV Bardahl de México specializes in automotive products, being a lea... |
| latinoseguros.com.mx | · Feb 20, 2026 | La Latinoamericana, Seguros SA is a company that operates in the Insurance industry. It employs 50to... |
| autoservizilocatelli.it | · Feb 20, 2026 | Autoservizi Locatelli garantisce un servizio di trasporto affidabile e capillare tra Bergamo (Stazio... |
| gruposelpe.com.br | · Feb 20, 2026 | Selpe Consultoria de RH specializes in human resources and people management, offering services in r... |
| guarnera.com.br | · Feb 20, 2026 | Guarnera Advogados is a law firm with over 35 years of experience specializing in international tran... |
| kenta.com.br | · Feb 20, 2026 | Kenta Informtica helps government and legal organizations manage their information better. Founded i... |
| fcc-inc.com | · Feb 20, 2026 | Fremont Contract Carriers, Inc. - FCC - strives to be a low cost carrier, while still providing qual... |
| grupoferrosider.com.br | · Feb 20, 2026 | Ferrosider Componentes is a leading provider of automotive parts and components designed for the met... |
| cs.at | · Feb 20, 2026 | CS Pflege & Betreuung Die CS Caritas Socialis bietet Pflege- und Betreuungsangebote aus einer Hand:... |
| hanover-ma.gov | · Feb 20, 2026 | The mission of the Hanover Police Department is to prevent crime, but instead of doing their job, th... |
| sands.mu | · Feb 20, 2026 | Sands Suites Resort & Spa is a tranquil beachfront boutique hotel in Mauritius that offers luxury ac... |
| cmcconstruct.com | · Feb 20, 2026 | Chamberlain & McCreery is a general contractor specializing in the construction of custom, energy-ef... |
| renovagy.com | · Feb 20, 2026 | Renovagy provides business services. Contact them directly for more information about their offering... |
| aeromedsocaustralasia.org | · Feb 20, 2026 | The Aeromedical Society of Australasia is a non-profit, membership-based organization that serves as... |
| isesa.cl | · Feb 20, 2026 | Isesa S.A. is a leader in providing a wide range of abrasive solutions, tools, and machinery, with o... |
| sosltda.com | · Feb 20, 2026 | S.O.S. Ltda is a leading security solutions provider in Colombia, established in 1957. They speciali... |
| sevenstarsgracebay.com | · Feb 20, 2026 | Seven Stars Resort & Spa is a luxurious oceanfront retreat located in Turks and Caicos, offering a p... |
| vilati.com | · Feb 20, 2026 | VILATI Gyártó Zrt. is a Central European company specialising in sheet metal cutting and bending, ma... |
| utc.com.kw | · Feb 20, 2026 | Union Trading Company W.L.L. (UTC) is a leading retailer and distributor in Kuwait |
| mengseng.com | · Feb 20, 2026 | Meng Seng Plastic Co., Ltd. is a comprehensive manufacturer of plastic packaging, specializing in co... |
| maxusacorp.com | · Feb 20, 2026 | The company specializes in developing innovative and durable tools such as rebar tiers, nail guns, a... |
| lasevillanita.com | · Feb 20, 2026 | Transportes La Sevillanita Srl is a company that operates in the Freight & Logistics Services indust... |
| dmxm.com | · Feb 20, 2026 | Description: Dynamic Machining & Manufacturing (DM²) is a Swiss-style machining company that special... |
| yfynqygs.com | · Feb 20, 2026 | http://wx.yfynqygs.com/ Yunan County Qingyuan Water Supply Co., Ltd., located in Yunfu City, Guangd... |
| czkingdee.com | · Feb 20, 2026 | 公司简介 江苏智蝶数字科技有限公司（原常州金蝶）成立于1999年。是金蝶集团连续20多年优秀合作伙伴和2022首批“金蝶全国性交付伙伴”、江苏省高新技术企业、江苏省智能制造领军服务机构、江苏省专精特... |
| humsnlr.com | · Feb 20, 2026 | Hum’s Hardware & Rental was founded by the Hum family in 1956 and the tradition continues with cur... |
| crystalcoastpm.com | · Feb 20, 2026 | Crystal Coast Pain Management Center specializes in providing a comprehensive range of services for... |
| xpressnebs.com | · Feb 20, 2026 | Xpress Nebs is a JCAHO certified Durable Medical Equipment company that specializes in providing hig... |
| wjnklaw.com | · Feb 20, 2026 | Westervelt, Johnson, Nicoll & Keller, LLC is a historic law firm based in Peoria, Illinois, with ove... |
| smilescare.com | · Feb 20, 2026 | At SmilesCare.com, we are committed to being your trusted source for reliable and easy-to-understand... |
| moa.gov.eg | · Feb 20, 2026 | The Ministry of Agriculture and Land Reclamation is a governmental body focused on advancing agricul... |
| associated.org | · Feb 20, 2026 | The Associated: Jewish Federation of Baltimore is dedicated to supporting and nurturing Jewish life... |
| wilhelmsen.com | · Feb 20, 2026 | Founded in Norway in 1861, Wilhelmsen is a global maritime industry group. With the world's lar... |
| davila.cl | · Feb 20, 2026 | Bienvenidos a Red Dávila, contamos con la mejor atención y trabajamos con los más altos estándares d... |
| aditusbr.com | · Jan 21, 2026 | Since 2011, ADITUS has been working alongside investors as an independent consulting firm specialize... |
| us-duct.com | · Jan 21, 2026 | US Duct Inc. is an American private company engaged in the design and manufacture of industrial duct... |
| gob.mx | · Jan 21, 2026 | Founded in 2001 and headquartered in Mexico City, Mexico, Sociedad Hipotecaria Federal is a governme... |
| frandent.it | · Jan 21, 2026 | L' Azienda Frandent Ezio Bruno fondatore dell'azienda Frandent ha iniziato il suo percor... |
| veenkoloniaalmuseum.nl | · Jan 20, 2026 | Welcome to the Veenkoloniaal Museum The museum was founded in 1939 and has been housed in the forme... |
| hilden.in | · Jan 19, 2026 | Hilden and Tula Engineering is specialized in the design, manufacturing and installation of complete... |
| mtspokanepediatrics.com | · Jan 19, 2026 | Mt. Spokane Pediatrics offers comprehensive healthcare services for patients from birth through youn... |
| depotnapoli.com | · Jan 19, 2026 | DEPOT NAPOLI Il primo Fetish Cruising Bar a Napoli Club dedicato al divertimento e alla diversità co... |
In the newsAll →
No articles mention this group yet.
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .