lynx
ransomware group · aka Lynx, Lynx ransomware · unknown · active since 2024-07 (mid-2024; first public vendor reporting by Sekoia and Kroll)
Victims · 7d
0flat
Victims · 30d
1active targets
Victims · 90d
6
All-time (tracked)
418since 2024-08-02
Last post
08-29 02:30UTC
Estimated earnings
—public reporting
Profile · glm-5.3-flash · updated
Lynx is a double-extortion ransomware operation first publicly reported in mid-2024, which researchers (Sekoia, 2024) assess as a likely rebrand or successor of Babuk/BabLock based on code similarities. It operates an affiliate-based RaaS model and ships encryptors for Windows, Linux, and VMware ESXi environments (vendor reporting, 2024-2025). Kroll (2025) describes big-game hunting of mid-sized organizations with initial access typically via compromised credentials or remote-access services, reconnaissance using network scanners, credential theft from Chromium-based browsers, and fast partial encryption using ChaCha20/AES. No public law-enforcement takedown is reported and no vendor or blockchain-analytics earnings estimate is available. The dashboard's tracked leak-site activity shows low recent volume (0 victims in 7 days, 6 in 90 days, last post 2026-08-29).
Tactics & tooling
- Double extortion: steals data before encryption and pressures non-payers via leak-site listings
- Ransomware-as-a-service model using affiliates (vendor reporting, 2024-2025)
- Encryptor variants for Windows, Linux, and VMware ESXi (Sekoia/Kroll, 2024-2025)
- Fast partial encryption of large files using ChaCha20/AES (Kroll, 2025)
- Network reconnaissance with tools such as SoftPerfect Network Scanner (Kroll, 2025)
- Credential harvesting from Chromium-based browser data (Kroll, 2025)
- PowerShell and living-off-the-land activity to disable Defender and delete shadow copies/backups (Kroll, 2025)
- Initial access via compromised credentials or remote-access services; no specific CVEs publicly attributed (unknown)
Targeted sectors
manufacturingprofessional serviceshealthcareconstructioneducationgovernmentfinance
Notable public victims
Kurita (kurita.eu), Wolf Construction (wolfconstruction.net), Jackson County, Indiana (jacksoncountyin.com), Easterseals Iowa (eastersealsia.org)
Estimated earnings
No public figure.
Leak-site victims418 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| Ben-Mor Inc. | · Sep 10, 2025 | A dynamic company, serving a North American clientele, Ben-Mor specializes in th... |
| Bounds Gillespie Killebrew Tushek Architects | · Sep 8, 2025 | BGKT Architects a new company has emerged out of a longstanding partnership betw... |
| rose-acre-farms-inc | · Sep 7, 2025 | www.goodegg.com www.roseacre.com Established in 1939 and headquartered in Seym... |
| www.sixgunsllc.com | · Sep 4, 2025 | Six Guns LLC offers superior commercial framing, drywall, and acoustical service... |
| www.simmonsboardman.com | · Sep 4, 2025 | Simmons Boardman Publishing is one of the oldest and most well-respected private... |
| elektro-buder.at | · Sep 4, 2025 | Es ist sicher, in dieser auerordentlichen Lage Elektroinstallationen durchzuführ... |
| www.ziegler-design.de | · Sep 4, 2025 | Friedrich Ziegler GmbH specializes in the design and production of medical furni... |
| firstlight.net | · Sep 4, 2025 | Headquartered in Albany, New York, FirstLight provides fiber-optic data, Interne... |
| denraytire.com | · Sep 4, 2025 | Denray Tire operates multiple locations across Manitoba and Saskatchewan, offeri... |
| www.medwayplastics.com | · Sep 4, 2025 | Medway Plastics is a family-owned plastic injection molding company based in Cal... |
| highdoc.de | · Sep 4, 2025 | Wir sind HighDoc Technische Dokumentation GmbH, mit Sitz im schönen Thüringen - ... |
| pesadoconstruction | · Sep 4, 2025 | Pesado Construction is a premier General Contractor based in San Antonio, specia... |
| www.onahotels.com | · Sep 4, 2025 | Ona Hotels pone a tu disposición los mejores alojamientos de los mejores destino... |
| www.primax.com | · Sep 4, 2025 | Primax Perú is a leading Peruvian corporation in the fuel and lubricant sector, ... |
| bemac-merivale | · Sep 4, 2025 | CSN Bemac Collision Centres has been a trusted provider of collision repair, aut... |
| volanno.com | · Sep 4, 2025 | Volanno is a software company providing software development, data analytics, an... |
| city-of-batavia | · Sep 4, 2025 | The City of Batavia is a business-friendly organization with a balanced budget, ... |
| www.metrotech.edu | · Sep 4, 2025 | Metro Technology Centers is a career and technology education institution that p... |
| www.dimarcogroup.com | · Sep 2, 2025 | The DiMarco Group, LLC founded in 1910 and headquartered in Rochester, New York,... |
| oakland-museum-of-california | · Sep 1, 2025 | Established in 1969, Oakland Museum of California provides collections, exhibiti... |
| BÜCHNER BARELLA Holding | · Aug 29, 2025 | BüchnerBarella gehört deutschlandweit zu den führenden, inhabergeführten technis... |
| Sterlings Accountancy Solutions | · Aug 26, 2025 | Sterlings Accountancy Solutions Ltd is a proactive firm of chartered accountants... |
| Hanson Chambers | · Aug 26, 2025 | Hanson Chambers is a barristers' chambers located in Adelaide, South Australia, ... |
| Bizcom Electronics | · Aug 20, 2025 | izcom Electronics, Inc. is a service provider based in Milpitas, California, spe... |
| abfe | · Aug 20, 2025 | American Biltrite Far East Inc (ABFE) is located in the hub of Asia, Singapore. ... |
| HK Hardware & Engineering | · Aug 20, 2025 | H.K Hardware Engineering Pte Ltd aims to be a one-stop industrial supplier for t... |
| True World Group LLC | · Aug 19, 2025 | True World Group is one of the nation’s leading, diversified seafood-products co... |
| Drive & Shine | · Aug 9, 2025 | Drive & Shine is a premier car care service that offers express car washes, inte... |
| Admiral Gaming Network | · Aug 8, 2025 | Security Breach Announcement The NOVOMATIC AG Group has been in Italy since 2... |
| cibraco | · Aug 5, 2025 | Cibraco Imóveis, referência no mercado imobiliário de Curitiba e Regão Metropoli... |
| Frontline Bioenergy | · Aug 4, 2025 | Since 2003, Frontline BioEnergy has been designing systems and proprietary equip... |
| gid-it.de | · Aug 3, 2025 | GID GmbH is a system house operating throughout Germany based in Cologne. As a s... |
| Lincoln Law | · Aug 1, 2025 | Established in 2001 and headquartered in Orem, Utah, Lincoln Law is a law firm t... |
| Tooling Systems Group | · Jul 30, 2025 | Advanced Tooling Systems (ATS) Concept Tooling Systems (CTS) Dienamic Tooling ... |
| ci-Fabrics | · Jul 29, 2025 | Ci Fabrics has been assisting businesses in their growth for over 40 years, offe... |
| premiersurfacesinc | · Jul 28, 2025 | Premier Surfaces revenue information is not publicly available. Premier Surfaces... |
| Morrow Equipment | · Jul 26, 2025 | proof of attack |
| salamanderresort.com | · Jul 25, 2025 | Salamander Resort & Spa is a luxury vacation destination located in Middleburg, ... |
| https://eagleonline.net/ | · Jul 23, 2025 | proof of attacks |
| Nippn TH | · Jul 22, 2025 | Nippn, founded in 1896, is a diversified food company with core operations in fl... |
| iBUYPOWER | · Jul 22, 2025 | Since 1999, iBUYPOWER has embodied its core beliefs of Perseverance, Unity, Stre... |
| RICHARD MILLE ASIA PTE. LTD & D'LEAGUE PTE. LTD. | · Jul 19, 2025 | Data from various companies in Dave Tan's holding. |
| Inside One | · Jul 15, 2025 | InsideOne specializes in digital transformation solutions aimed at enhancing bus... |
| Victoria Garden | · Jul 15, 2025 | Les Appart hôtels Victoria Garden vous apportent un espace de vie chaleureux, s... |
| Adrian Kenya | · Jul 15, 2025 | Adrian Company Limited is a versatile solution provider, coupling a revolutionar... |
| Greta Group | · Jul 15, 2025 | Greta Group is one of leading business groups formed in 1996 in Chennai, India, ... |
| Nactarome | · Jul 10, 2025 | Founded in 2018 and headquartered in Bresso, Italy, Nactarome specializes in dev... |
| nactarome.eu | · Jul 10, 2025 | Founded in 2018 and headquartered in Bresso, Italy, Nactarome specializes in dev... |
| Confartigianato Imprese | · Jul 9, 2025 | Serve aiuto per fare impresa? Confartigianato dà risposte su misura per gli arti... |
| The Providence Warwick Convention | · Jul 9, 2025 | Providence Warwick Convention & Visitors Bureau is a creative capital community.... |
In the newsAll →
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .