lynx
ransomware group · aka Lynx, Lynx ransomware · unknown · active since 2024-07 (mid-2024; first public vendor reporting by Sekoia and Kroll)
Victims · 7d
0flat
Victims · 30d
1active targets
Victims · 90d
6
All-time (tracked)
418since 2024-08-02
Last post
08-29 02:30UTC
Estimated earnings
—public reporting
Profile · glm-5.3-flash · updated
Lynx is a double-extortion ransomware operation first publicly reported in mid-2024, which researchers (Sekoia, 2024) assess as a likely rebrand or successor of Babuk/BabLock based on code similarities. It operates an affiliate-based RaaS model and ships encryptors for Windows, Linux, and VMware ESXi environments (vendor reporting, 2024-2025). Kroll (2025) describes big-game hunting of mid-sized organizations with initial access typically via compromised credentials or remote-access services, reconnaissance using network scanners, credential theft from Chromium-based browsers, and fast partial encryption using ChaCha20/AES. No public law-enforcement takedown is reported and no vendor or blockchain-analytics earnings estimate is available. The dashboard's tracked leak-site activity shows low recent volume (0 victims in 7 days, 6 in 90 days, last post 2026-08-29).
Tactics & tooling
- Double extortion: steals data before encryption and pressures non-payers via leak-site listings
- Ransomware-as-a-service model using affiliates (vendor reporting, 2024-2025)
- Encryptor variants for Windows, Linux, and VMware ESXi (Sekoia/Kroll, 2024-2025)
- Fast partial encryption of large files using ChaCha20/AES (Kroll, 2025)
- Network reconnaissance with tools such as SoftPerfect Network Scanner (Kroll, 2025)
- Credential harvesting from Chromium-based browser data (Kroll, 2025)
- PowerShell and living-off-the-land activity to disable Defender and delete shadow copies/backups (Kroll, 2025)
- Initial access via compromised credentials or remote-access services; no specific CVEs publicly attributed (unknown)
Targeted sectors
manufacturingprofessional serviceshealthcareconstructioneducationgovernmentfinance
Notable public victims
Kurita (kurita.eu), Wolf Construction (wolfconstruction.net), Jackson County, Indiana (jacksoncountyin.com), Easterseals Iowa (eastersealsia.org)
Estimated earnings
No public figure.
Leak-site victims418 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| www.tecnoelectric.com.py | · Jan 5, 2026 | Tecno Electric S.A. is a specialist in energy solutions for buildings, industry,... |
| salcom.com | · Jan 5, 2026 | Our name is an acronym for Sea Air and Land Communication and as the name implie... |
| swdc.wa | · Jan 5, 2026 | The South West Development Commission is focused on advancing economic diversifi... |
| laurysenkitchens.com | · Jan 5, 2026 | Laurysen Kitchens has been a leading provider of high-quality kitchen cabinets i... |
| wildbunchdistribution.com | · Jan 5, 2026 | Wild Bunch Distribution is a Paris-based media and entertainment company that co... |
| kiddsservices.com | · Jan 5, 2026 | Kidds Restoration Services is a family-owned restoration company based in Lynchb... |
| hartford.fr | · Jan 5, 2026 | Hartford specializes in high-end casual clothing for men, women, and children, o... |
| groupecho.com | · Jan 5, 2026 | Groupecho Canada offers a wide range of services including credit reports, debt ... |
| miltonfl.org | · Jan 5, 2026 | MILTON-FL.RESTAURANTS800.COM serves up a guide for restaurants in the city of Mi... |
| www.braemac.com | · Jan 5, 2026 | Braemac, headquartered in Sydney Australia, and founded in 1986, is an electroni... |
| madisonareaymca.org | · Jan 5, 2026 | The Madison Area YMCA offers a variety of programs and services focusing on yout... |
| CSA Tax & Advisory | · Dec 26, 2025 | CSA Tax & Advisory is a licensed accounting firm based in Haverhill, MA, special... |
| https://www.ckm-montagen.de/en/ | · Dec 23, 2025 | CKM Kondring Montagen GmbH & Co. KG is a leading assembly company specializing i... |
| ruskcountywi.us | · Dec 23, 2025 | Rusk County, Wisconsin is a community that provides services such as an Airport,... |
| https://www.omnibusjp.com | · Dec 23, 2025 | OMNIBUS JAPAN INC. is a creative group that aims to extract the thoughts of many... |
| ccedarvalleyservices.org | · Dec 23, 2025 | Cedar Valley Services Inc is an employment agency based in Southern Minnesota, o... |
| www.fecrwy.com | · Dec 23, 2025 | The Florida East Coast Railway freight rail system located along the east coast ... |
| terport.com.py | · Dec 21, 2025 | We are the leading river container, general cargo, and RORO terminal operator in... |
| L.O. Trading | · Dec 18, 2025 | L.O. Trading is a leading Technical Trading and Logistics Company that specializ... |
| www.ktlgroup.com | · Dec 16, 2025 | KTL Offshore is a company with a global vision: to extend our footprint internat... |
| www.advancedentdenver.com | · Dec 16, 2025 | Advanced ENT & Allergy Center is a leading provider in Denver specializing in al... |
| www.eliteflower.com | · Dec 8, 2025 | Founded in 1991 and headquartered in Miami, Florida, Elite Flower specializes in... |
| www.toc.co.jp | · Dec 6, 2025 | TOC Building is a commercial facility that provides a comprehensive floor guide,... |
| Trucash | · Dec 6, 2025 | TruCash is a modern platform for fast, secure, and convenient financial transact... |
| sspinnovations.com | · Dec 4, 2025 | At SSP Innovations, we help utility, pipeline, and telecommunications organizati... |
| vanteceurope.com | · Nov 22, 2025 | This page is Group Mission. VANTEC, leading company of Auto Parts Logistics, pro... |
| classiccenter.com | · Nov 20, 2025 | Akins Ford Arena is a state-of-the-art entertainment venue located in downtown A... |
| nationalcoatingsinc.com | · Oct 30, 2025 | National Coatings is a trusted commercial and industrial painting company servin... |
| Navigator Business Solutions | · Oct 27, 2025 | Life Sciences/Biotechnology, Distribution, and Consumer Products Organizations c... |
| simmerscrane.com | · Oct 24, 2025 | Simmers Crane Design & Services Company was founded in 1958 by Charles Simmers, ... |
| ozsoft.com.au | · Oct 23, 2025 | OzSoft Solutions Pty Ltd is a company that operates in the Custom Software & IT ... |
| marquscompanies.com | · Oct 21, 2025 | Marquis Companies offers healthcare services. The Company offers assisted living... |
| trailridgeenergy | · Oct 21, 2025 | Trail Ridge Energy Partners II LLC is a privately held oil and gas exploration a... |
| www.dekalbcountyga.gov | · Oct 21, 2025 | DeKalb County is the third most populated county in the state of Georgia and is ... |
| www.ccls.org | · Oct 21, 2025 | The Chester County Library & District Center was established in 1962 and moved t... |
| saacke.com | · Oct 20, 2025 | SAACKE GmbH is a family-owned German company founded in 1931 and headquartered i... |
| www.cbsaust.org.au | · Oct 15, 2025 | CBS Tasmania is a not-for-profit organization that provides personalized aged ca... |
| americanhome | · Oct 10, 2025 | American Home Furniture and Mattress was founded by Mr. Emanuel "Mannie" Blaugru... |
| TriMed Inc. HSIC | · Oct 2, 2025 | Headquartered in Santa Clarita, California, TriMed is a leader in developing cre... |
| TriMed Inc. (Henry Schein) | · Oct 2, 2025 | Headquartered in Santa Clarita, California, TriMed is a leader in developing cre... |
| suratisweetmart.com | · Oct 2, 2025 | We have over 600 GB of your data, if you dont want your data leak or sold, let u... |
| Dodd-group-ltd | · Sep 30, 2025 | During the attack we quietly extracted roughly 4 TB of data, including material ... |
| pactchangeslives.com | · Sep 25, 2025 | Porter County PACT is a company that operates in the Government industry. It emp... |
| lwginc.net | · Sep 25, 2025 | LWG Construction offers end-to-end commercial construction services, focusing on... |
| VIR | · Sep 24, 2025 | Vir Biotechnology is a clinical-stage immunology company that focuses on combini... |
| www.margaritavilleatsea.com | · Sep 23, 2025 | Margaritaville at Sea Cruises offers a unique offshore resort experience with fu... |
| www.independentpaperboard.com | · Sep 18, 2025 | Independent Paperboard Marketing, LLC is a problem-solving paperboard brokerage ... |
| CAS EXhibition Partners | · Sep 15, 2025 | Cas Exhibition Partners is a stand designer and stand builder based in Venlo w... |
| olarra | · Sep 14, 2025 | www.olarra.com Olarra is specialized in long products manufacturing. Olarra is ... |
| Encore Leisure Group | · Sep 11, 2025 | Encore Leisure Group Founded by Dale Folmar and Jacques James, was formed to ma... |
In the newsAll →
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .