lynx
ransomware group · aka Lynx, Lynx ransomware · unknown · active since 2024-07 (mid-2024; first public vendor reporting by Sekoia and Kroll)
Victims · 7d
0flat
Victims · 30d
1active targets
Victims · 90d
6
All-time (tracked)
418since 2024-08-02
Last post
08-29 02:30UTC
Estimated earnings
—public reporting
Profile · glm-5.3-flash · updated
Lynx is a double-extortion ransomware operation first publicly reported in mid-2024, which researchers (Sekoia, 2024) assess as a likely rebrand or successor of Babuk/BabLock based on code similarities. It operates an affiliate-based RaaS model and ships encryptors for Windows, Linux, and VMware ESXi environments (vendor reporting, 2024-2025). Kroll (2025) describes big-game hunting of mid-sized organizations with initial access typically via compromised credentials or remote-access services, reconnaissance using network scanners, credential theft from Chromium-based browsers, and fast partial encryption using ChaCha20/AES. No public law-enforcement takedown is reported and no vendor or blockchain-analytics earnings estimate is available. The dashboard's tracked leak-site activity shows low recent volume (0 victims in 7 days, 6 in 90 days, last post 2026-08-29).
Tactics & tooling
- Double extortion: steals data before encryption and pressures non-payers via leak-site listings
- Ransomware-as-a-service model using affiliates (vendor reporting, 2024-2025)
- Encryptor variants for Windows, Linux, and VMware ESXi (Sekoia/Kroll, 2024-2025)
- Fast partial encryption of large files using ChaCha20/AES (Kroll, 2025)
- Network reconnaissance with tools such as SoftPerfect Network Scanner (Kroll, 2025)
- Credential harvesting from Chromium-based browser data (Kroll, 2025)
- PowerShell and living-off-the-land activity to disable Defender and delete shadow copies/backups (Kroll, 2025)
- Initial access via compromised credentials or remote-access services; no specific CVEs publicly attributed (unknown)
Targeted sectors
manufacturingprofessional serviceshealthcareconstructioneducationgovernmentfinance
Notable public victims
Kurita (kurita.eu), Wolf Construction (wolfconstruction.net), Jackson County, Indiana (jacksoncountyin.com), Easterseals Iowa (eastersealsia.org)
Estimated earnings
No public figure.
Leak-site victims418 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| cutlercapital | · 18d ago | Cutler Capital Management, LLC of Worcester, MA is an investment advisory firm r... |
| www.jerryleigh.com | · Aug 6, 2026 | Jerry Leigh is a family-owned women's, men's, and children's clothing manufactur... |
| www.talbotdes.org | · Aug 6, 2026 | Talbot County Department of Emergency Services provides essential emergency serv... |
| www.someco.com | · Jun 18, 2026 | Southern Mechanical Contractors is a merit shop mechanical and industrial constr... |
| www.eastersealsia.org | · Jun 18, 2026 | Easterseals Iowa provides an Assistive Technology Program that supports Iowans o... |
| www.wolfconstruction.net | · Jun 18, 2026 | Wolf Construction Services, Inc specializes in commercial wood framing, framing ... |
| www.commonwealth-partners.com | · Jun 11, 2026 | CommonWealth Partners Properties specializes in a range of real estate services ... |
| bayareaherbs.com | · May 10, 2026 | Bay Area Herbs & Specialties is a leading supplier of fresh culinary herbs and s... |
| jacksoncountyin.com | · May 10, 2026 | Jackson County Visitor Center serves as a gateway for travelers seeking to explo... |
| st-annes.uk.com | · May 10, 2026 | St Anne's Catholic School & Sixth Form College is a distinguished educational in... |
| lifelongaccess.org | · May 10, 2026 | Lifelong Access is a dedicated organization that supports individuals with disab... |
| www.kurita.eu | · May 10, 2026 | Kurita Europe specializes in advanced water treatment technologies and sustainab... |
| ossistemes.com | · May 10, 2026 | OS Sistemes is a tech company that helps businesses bring their digital projects... |
| csb-battery.com | · May 10, 2026 | CSB Energy Technology Co., Ltd. is a leading global manufacturer of Valve-Regula... |
| funkychunky.com | · May 10, 2026 | Funky Chunky offers gourmet caramel corn and popcorn snacks, providing unique gi... |
| Stonehenge | · Apr 14, 2026 | Stonehenge Co Ltd is a company that operates in the Commercial & Residential Con... |
| cwwcontractors.com | · Apr 14, 2026 | CW&W Contractors is a leading civil construction contractor specializing in infr... |
| sentrydynamics.com | · Apr 13, 2026 | Sentry Dynamics, Inc. provides a powerful integrated suite of data solutions tai... |
| ACNHealthcare | · Apr 8, 2026 | www.acnhealthcare.com Revenue $253.6 Million We specialize in medical billing ... |
| www.smithdollar.com | · Apr 7, 2026 | Smith Dollar is a Santa Rosa law firm that provides comprehensive legal services... |
| njpcs.org | · Mar 26, 2026 | NJ Pain Care Specialists is a leading interventional pain management practice lo... |
| indrub.com | · Mar 14, 2026 | Industrial Rubber Supply is a leading manufacturer and supplier of custom-molded... |
| Keller Polska | · Mar 13, 2026 | Keller Polska, operating for over 20 years, is a leader in the geotechnical mark... |
| Africa Insurance | · Mar 13, 2026 | Lion of Africa Insurance Company Ltd is a company that operates in the Insurance... |
| https://www.hegelmann.com | · Mar 1, 2026 | Hegelmann Group is a family-run logistics company headquartered in Bruchsal, Ger... |
| Altalingua | · Feb 20, 2026 | Altalingua specializes in multilingual technical documentation, primarily servin... |
| Stera Chemicals | · Feb 20, 2026 | Stera Chemicals is a leading distributor of raw chemical materials in Romania, s... |
| Keylogistics Chile | · Feb 20, 2026 | Keylogistics Chile S A is a company that operates in the Restaurants industry. I... |
| secure.ae | · Feb 19, 2026 | you have 7 days to contact us, after we will publish all your files. |
| gbaco.com | · Feb 17, 2026 | GOFF BACKA ALFERA & COMPANY, LLC is a full-service public accounting and consult... |
| powersmiller.com | · Feb 17, 2026 | Powers Miller Attorneys At Law is a civil litigation firm based in Northern Cali... |
| structuredassetservices.com | · Feb 17, 2026 | About Structured Asset Funding and 123LUMPSUM -- Located in Hallandale Beach, Fl... |
| La Rioja Alta | · Feb 15, 2026 | La Rioja Alta, S.A. is a prominent winery offering a diverse range of wines from... |
| www.trisa.ch | · Feb 4, 2026 | TRISA AG specializes in the development and production of high-quality oral care... |
| peterboroughpublichealth.ca | · Feb 3, 2026 | Lakelands Public Health, formerly known as the HKPR District Health Unit and Pet... |
| shorelinenyc.com | · Jan 30, 2026 | Shoreline builders continuously raises the bar in excellence, quality and safety... |
| www.roschvisionary.com | · Jan 30, 2026 | Rosch Visionary Systems specializes in software solutions designed specifically ... |
| Ocean Fish | · Jan 19, 2026 | OceanFish is a leading company in Romania since 1998, specializing in the import... |
| Grupo Ruiz | · Jan 9, 2026 | Grupo Ruiz is a leading firm in sustainable and innovative mobility with over a ... |
| Options | · Jan 7, 2026 | Options Community Services Society is a company that operates in the Individual ... |
| www.swautomation.at | · Jan 6, 2026 | sw-wireterminal.com Before we developed our own products, we were one thing... |
| www.sje.vic.edu.au | · Jan 5, 2026 | St Joseph's College Echuca is a Kildare Education Ministries Catholic co-educati... |
| www.granosycereales.com.co | · Jan 5, 2026 | Granos y Cereales de Colombia S.A. is a Colombian agro-industrial company with o... |
| www.ville-dunkerque.fr | · Jan 5, 2026 | Ville de Dunkerque is focused on the revitalization and transformation of the Du... |
| www.blackdogsalvage.com | · Jan 5, 2026 | Black Dog Salvage specializes in the reclamation, repurposing and resale of arch... |
| crawfordorthodontics.net | · Jan 5, 2026 | Crawford Orthodontics |
| www.stcharlesprep.org | · Jan 5, 2026 | St Charles Preparatory School is a company that operates in the Education indust... |
| www.mcphillamysgold.com | · Jan 5, 2026 | https://regisresources.com.au Leading Australian gold producer on the ASX Bo... |
| www.mscorp.net | · Jan 5, 2026 | Marine Systems Corporation (MSCorp) specializes in marine engineering, design, p... |
| www.burdettedental.com | · Jan 5, 2026 | Burdette Dental Laboratory, located in Birmingham, Alabama, has over 50 years of... |
In the newsAll →
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .