lynx
ransomware group · aka Lynx, Lynx ransomware · unknown · active since 2024-07 (mid-2024; first public vendor reporting by Sekoia and Kroll)
Victims · 7d
0flat
Victims · 30d
1active targets
Victims · 90d
5
All-time (tracked)
418since 2024-08-02
Last post
08-29 02:30UTC
Estimated earnings
—public reporting
Profile · glm-5.3-flash · updated
Lynx is a double-extortion ransomware operation first publicly reported in mid-2024, which researchers (Sekoia, 2024) assess as a likely rebrand or successor of Babuk/BabLock based on code similarities. It operates an affiliate-based RaaS model and ships encryptors for Windows, Linux, and VMware ESXi environments (vendor reporting, 2024-2025). Kroll (2025) describes big-game hunting of mid-sized organizations with initial access typically via compromised credentials or remote-access services, reconnaissance using network scanners, credential theft from Chromium-based browsers, and fast partial encryption using ChaCha20/AES. No public law-enforcement takedown is reported and no vendor or blockchain-analytics earnings estimate is available. The dashboard's tracked leak-site activity shows low recent volume (0 victims in 7 days, 6 in 90 days, last post 2026-08-29).
Tactics & tooling
- Double extortion: steals data before encryption and pressures non-payers via leak-site listings
- Ransomware-as-a-service model using affiliates (vendor reporting, 2024-2025)
- Encryptor variants for Windows, Linux, and VMware ESXi (Sekoia/Kroll, 2024-2025)
- Fast partial encryption of large files using ChaCha20/AES (Kroll, 2025)
- Network reconnaissance with tools such as SoftPerfect Network Scanner (Kroll, 2025)
- Credential harvesting from Chromium-based browser data (Kroll, 2025)
- PowerShell and living-off-the-land activity to disable Defender and delete shadow copies/backups (Kroll, 2025)
- Initial access via compromised credentials or remote-access services; no specific CVEs publicly attributed (unknown)
Targeted sectors
manufacturingprofessional serviceshealthcareconstructioneducationgovernmentfinance
Notable public victims
Kurita (kurita.eu), Wolf Construction (wolfconstruction.net), Jackson County, Indiana (jacksoncountyin.com), Easterseals Iowa (eastersealsia.org)
Estimated earnings
No public figure.
Leak-site victims418 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| ITACCESS PTE. LTD. | · Jul 7, 2025 | ABOUT US ITAccess was established in 2007 with a vision to develop our team a... |
| Woodtect | · Jun 27, 2025 | PRECISION ENGINEERING CO., LTD. is a specialist in hard oil, polyurethane, and w... |
| hubermanlaw.co.il | · Jun 26, 2025 | With our recognized leadership in applying legal service and technology innovati... |
| motorsport-de-la-capitale | · Jun 24, 2025 | Moto Sport de la Capitale is a dealership located in Rouyn-Noranda, Abitibi-Témi... |
| lurie-glass | · Jun 24, 2025 | Lurie Glass has been providing high-quality glass and glazing services to southe... |
| Inflite Engineering Services | · Jun 24, 2025 | Founded in 1983 Inflite has developed progressively to become one of the most im... |
| gouverneur.com | · Jun 24, 2025 | Gouvernor Hotels Discover Quebec with Gouverneur Hotels! The Hôtels Gouverneur... |
| Telcom Insurance Group | · Jun 23, 2025 | Telcom Insurance Group specializes in providing business insurance solutions tai... |
| Levinzon CPA | · Jun 21, 2025 | Whether you're an employee relocating to the U.S, a domestic or foreign investor... |
| siamgas and petrochemicals public company ltd | · Jun 19, 2025 | Siamgas and Petrochemicals Public Company Limited, together with its subsidiarie... |
| accountant falavinha.local | · Jun 16, 2025 | Falavinha Next specializes in simplified accounting services in Curitiba, offeri... |
| frazierbowles.com | · Jun 12, 2025 | Frazier Bowles is a full-service law firm specializing in Real Estate, Business ... |
| Biogest | · Jun 12, 2025 | Biogest offers its PowerRing technology to customers in the Greek market. The Po... |
| Frazier & Bowles | · Jun 12, 2025 | Frazier Bowles is a full-service law firm specializing in Real Estate, Business ... |
| quenotedeporten | · Jun 6, 2025 | Law Office Of Omar O Vargas is a company that operates in the Law Firms & Legal ... |
| lgipr | · Jun 6, 2025 | Luis Garratón, LLC is a full-service distributor specializing in pharmaceuticals... |
| Best Profil | · Jun 6, 2025 | Après 20 ans d’expertises dans le domaine des ressources humaines, la synergie e... |
| GRECA Asfaltos (grupogreca.com.br) | · Jun 5, 2025 | Learn about the GRECA Transparency Program and access the reporting channel. 60 ... |
| Davies, Mcfarland & Carroll | · Jun 4, 2025 | Davies, McFarland & Carroll. We were attacked in May 2025. They claim to be l... |
| university of chile | · Jun 4, 2025 | Universidad de Chile, located in Santiago, is the oldest and the most prestigiou... |
| yahtec | · Jun 3, 2025 | YAHTEC is a French manufacturer of gas heating solutions, catering to industrial... |
| Diyar | · Jun 2, 2025 | www.diyar.com - Architecture, Engineering & Design While your system adminis... |
| Wilkie Sanderson | · Jun 2, 2025 | On time. Every time. Customer enthusiasm is built on a foundation of integrity,... |
| Chrisman Commercial | · May 31, 2025 | Chrisman Commercial is a professional Boulder Commercial Real Estate firm specia... |
| Rousseau | · May 31, 2025 | Rousseau Farming Company specializes in providing fresh, locally sourced produce... |
| kosmas.cz | · May 28, 2025 | Online bookstore Kosmas.cz A great source of good books The online bookstore o... |
| Runtec | · May 19, 2025 | Runtec Co., Ltd. is a Japanese logistics company founded in 1953 and part of the... |
| Gearhiser Peters Elliott & Cannon | · May 17, 2025 | Gearhiser, Peters, Elliott & Cannon, PLLC provides a wide range of general and s... |
| diyar.com | · May 17, 2025 | www.diyar.com - Architecture, Engineering & Design While your system adminis... |
| Maruichi Leavitt Pipe & Tube | · May 16, 2025 | Part 1 |
| Royal Chemical | · May 14, 2025 | Royal Chemical Company, Ltd. operates as a chemical blender, and toll and contra... |
| Hire Velocity (lan.hirevelocity.com) | · May 5, 2025 | Hire Velocity designs talent strategies that build great teams and great busines... |
| CabinC.com | · May 4, 2025 | Cabin Crafters has been serving the corporate aviation community for more than 2... |
| runtec.co.jp | · May 2, 2025 | Runtec Co., Ltd. is a Japanese logistics company founded in 1953 and part of the... |
| derichsukonertz.de | · May 2, 2025 | Wir fertigen seit 1967 Zahnrder für smtliche Industriebereiche. Vom Messritzel b... |
| David Mills CPA, LLC | · May 1, 2025 | David Mills C.P.A. has over 30 years’ hands-on experience in roles of a controll... |
| southernagllc.com | · May 1, 2025 | Southern Ag LLC is a company that specializes in providing consulting services f... |
| Penn Emblem (penn.local) | · May 1, 2025 | For over 100 years, Penn Emblem has been providing custom embroidered emblems an... |
| WDEF-TV | · May 1, 2025 | WDEFTV, channel 12, is the CBS affiliate television station for Chattanooga and ... |
| shgcpa.com | · Apr 25, 2025 | At Sheheen Hancock & Godwin, LLP, we believe in the value of relationships. We v... |
| corporateflight.com | · Apr 25, 2025 | Corporate Flight specializes in private jet charters, offering services that pri... |
| impactcanada.com | · Apr 25, 2025 | Impact Public Affairs has been in operation since 1997, and is a full-service bo... |
| buildingmaterialspecialties.com | · Apr 25, 2025 | When time is of the essence- Building Material Specialties has a large inventory... |
| friscochamber.com | · Apr 25, 2025 | The Frisco Chamber of Commerce is a 4-Star Accredited Chamber of Commerce that c... |
| greatplainstransport.com | · Apr 25, 2025 | Great Plains Transport specializes in temperature controlled commodities, and ou... |
| pay4freight.com | · Apr 25, 2025 | Pay4Freight is a highly rated freight factoring company specializing in providin... |
| end2endtechnologies | · Apr 24, 2025 | End 2 End Technologies was founded 1999, as a low-voltage cabling company. Since... |
| Vicarage Court Solicitors | · Apr 24, 2025 | At Vicarage Court Solicitors we aim to provide you with expert advice concerning... |
| Farmo Res | · Apr 23, 2025 | 300 Gb of private data will be available in 48 hours. -------- FOR 40 YEARS WE... |
| Springer & Steinberg | · Apr 22, 2025 | 363gb of confidential corporate and customer data will be released within 10 day... |
In the newsAll →
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .