lynx
ransomware group · aka Lynx, Lynx ransomware · unknown · active since 2024-07 (mid-2024; first public vendor reporting by Sekoia and Kroll)
Victims · 7d
0flat
Victims · 30d
1active targets
Victims · 90d
3
All-time (tracked)
418since 2024-08-02
Last post
08-29 02:30UTC
Estimated earnings
—public reporting
Profile · glm-5.3-flash · updated
Lynx is a double-extortion ransomware operation first publicly reported in mid-2024, which researchers (Sekoia, 2024) assess as a likely rebrand or successor of Babuk/BabLock based on code similarities. It operates an affiliate-based RaaS model and ships encryptors for Windows, Linux, and VMware ESXi environments (vendor reporting, 2024-2025). Kroll (2025) describes big-game hunting of mid-sized organizations with initial access typically via compromised credentials or remote-access services, reconnaissance using network scanners, credential theft from Chromium-based browsers, and fast partial encryption using ChaCha20/AES. No public law-enforcement takedown is reported and no vendor or blockchain-analytics earnings estimate is available. The dashboard's tracked leak-site activity shows low recent volume (0 victims in 7 days, 6 in 90 days, last post 2026-08-29).
Tactics & tooling
- Double extortion: steals data before encryption and pressures non-payers via leak-site listings
- Ransomware-as-a-service model using affiliates (vendor reporting, 2024-2025)
- Encryptor variants for Windows, Linux, and VMware ESXi (Sekoia/Kroll, 2024-2025)
- Fast partial encryption of large files using ChaCha20/AES (Kroll, 2025)
- Network reconnaissance with tools such as SoftPerfect Network Scanner (Kroll, 2025)
- Credential harvesting from Chromium-based browser data (Kroll, 2025)
- PowerShell and living-off-the-land activity to disable Defender and delete shadow copies/backups (Kroll, 2025)
- Initial access via compromised credentials or remote-access services; no specific CVEs publicly attributed (unknown)
Targeted sectors
manufacturingprofessional serviceshealthcareconstructioneducationgovernmentfinance
Notable public victims
Kurita (kurita.eu), Wolf Construction (wolfconstruction.net), Jackson County, Indiana (jacksoncountyin.com), Easterseals Iowa (eastersealsia.org)
Estimated earnings
No public figure.
Leak-site victims418 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| amethystgroup.co.uk | · Apr 22, 2025 | Amethyst Group is a third party logistics provider offering warehousing and dist... |
| R&N Manufacturing | · Apr 22, 2025 | R & M Manufacturing Inc is a company that operates in the Furniture industry. It... |
| dhsmithco.com | · Apr 18, 2025 | dhsmithco.com is a company that operates in the Commercial & Residential Constru... |
| Sally B Gold | · Apr 17, 2025 | Law Offices of Sally B. Gold, LLC is a law firm based in downtown Baltimore, Mar... |
| Feldman & Lopez | · Apr 16, 2025 | Feldman & Lopez, P.A. is a boutique law firm located in the heart of South Flori... |
| Hyalogic | · Apr 16, 2025 | Hyalogic, the leader in premium high molecular weight hyaluronic acid, offers jo... |
| McElwee Firm | · Apr 16, 2025 | McElwee Firm PLLC is a company that operates in the Law Firms & Legal Services i... |
| Astra Products | · Apr 15, 2025 | Astra Products of Ohio is a supplier to the window covering industry. We do not... |
| Lake HVAC | · Apr 15, 2025 | Lake HVAC was founded in 1975. For more than 40 years, Lake HVAC has built and m... |
| nevadareadymix.com | · Apr 15, 2025 | Nevada Ready Mix was founded in 1960. The company offers concrete for residentia... |
| toolsign.com | · Apr 15, 2025 | toolsign GmbH is a company that operates in the Consumer Services industry. It e... |
| spscompanies.com | · Apr 15, 2025 | Founded in 1951 and headquartered in St Louis Park, Minnesota, SPS Companies is ... |
| bilbie.com.au | · Apr 12, 2025 | Bilbie Faraday Harrison, Solicitors is a law firm based in Newcastle, NSW, found... |
| Restaurant Associates | · Apr 11, 2025 | Caribbean’s leading restaurant management company. Fast food franchises like Bur... |
| Colmar Industrial Supplies | · Apr 11, 2025 | Colmar Industrial Supplies Inc. is a trusted distributor of industrial cutting t... |
| gramoll.com | · Apr 9, 2025 | Phone Number: (801) 295-2341 Revenue: $5 Million Employees: 25 Industry: Cons... |
| Alton Steel | · Apr 2, 2025 | Alton Steel Inc. is an American steel manufacturing company founded in 2003 and ... |
| Pacific Residential Mortgage | · Mar 29, 2025 | The PacRes story of growth continues to this day because our employees give ever... |
| Amatech | · Mar 29, 2025 | Engineering, Prod, Proto, Purchaising, Sales, Scan, Business Development |
| Solar Optimum | · Mar 29, 2025 | Solar Optimum, Inc. is a Los Angeles-based company that provides renewable solar... |
| solaroptimum.com | · Mar 29, 2025 | Solar Optimum, Inc. is a Los Angeles-based company that provides renewable solar... |
| Martin Mechanical (martin.local) | · Mar 28, 2025 | Martin Mechanical Contractors Inc. is a Kansas City-based mechanical contracting... |
| AJF Inspections & Engineering () | · Mar 28, 2025 | AJF Inspections provides professional property inspections including home, comme... |
| Commercial Concrete Systems | · Mar 28, 2025 | Commercial Concrete Systems is the cutting edge leader in structural concrete co... |
| amatechinc.com | · Mar 27, 2025 | Engineering, Prod, Proto, Purchaising, Sales, Scan, Business Development |
| Direct Traffic Control | · Mar 26, 2025 | Direct Traffic Control, Inc., an Oklahoma owned and operated corporation, is an ... |
| Doumen | · Mar 23, 2025 | Founded in 1915, the Doumen Group is a family-owned company with branches in Pér... |
| Palomino Petroleum | · Mar 19, 2025 | Palomino Petroleum Inc is a company that operates in the Oil & Gas Exploration &... |
| AMICIO | · Mar 19, 2025 | AMICIO does business in the Activities of call centres sector. AMICIO is located... |
| Fulcrum Lifting | · Mar 14, 2025 | Fulcrum Lifting specializes in the distribution of lifting and rigging parts, pr... |
| Tryon | · Mar 14, 2025 | Tryon Srl is a company that operates in the Restaurants industry. It employs 50t... |
| Indiv Usa | · Mar 14, 2025 | NDIV was founded in 1964 and since then it has been a leading export company, su... |
| Harrells.com | · Mar 13, 2025 | Based in Lakeland, Florida since 1941, Harrells is a leading producer and distri... |
| fstlogistics.com | · Mar 13, 2025 | Based in Columbus, Ohio, FST Logistics first opened its doors in 1991 with 11 co... |
| Springfield Water and Sewer Commission | · Mar 11, 2025 | Documents. |
| Longue Vue Club | · Mar 11, 2025 | Longue Vue Club is one of the Pittsburgh area's oldest country clubs. Situated o... |
| ciscientific.com.au | · Mar 11, 2025 | C.I. Scientific Pty Ltd (CIS) is an Australian proprietary company that speciali... |
| ACTi Corporation | · Mar 9, 2025 | ACTi is an expert in IP video analytics solutions for security management, oper... |
| Tech NH | · Mar 8, 2025 | TechNH has evolved dramatically since we opened our doors more than forty years ... |
| lofotenseafood.com | · Mar 7, 2025 | Lofoten Seafood was established in 1980 by Britt and Roger Mosseng, who started ... |
| ACDC Express | · Mar 7, 2025 | Established in 1984, ACDC Dynamics is the leading manufacturer, importer and dis... |
| Tugwell Pump & Supply | · Mar 6, 2025 | With offices in Pensacola, FL and Mobile, AL, we specialize in submersible, grin... |
| Dynamic Closures | · Mar 6, 2025 | We place our Customer's needs above all else, always exceed their expectations. ... |
| Adval Tech | · Mar 6, 2025 | The Adval Tech Group, which is listed on the Swiss Stock Exchange, operates in t... |
| Pervedant | · Mar 5, 2025 | Pervedant is a company with 30 years of experience specializing in the design an... |
| Schmiedetechnik Plettenberg GmbH & Co KG | · Mar 5, 2025 | Schmiedetechnik Plettenberg GmbH & Co KG is a company that operates in the Hand,... |
| Seabank Group | · Mar 4, 2025 | Seabank Group is a company that operates in the Lodging & Resorts industry. It e... |
| La Unión | · Mar 3, 2025 | La Unión is a Spanish company specializing in the production and sale of fruits ... |
| Engineering Mechanics | · Feb 28, 2025 | Engineering Mechanics Corporation of Columbus (Emc 2) is an employee owned engin... |
| Biogena GmbH & Co KG | · Feb 27, 2025 | BIOGENA – Your Partner in Health and Wellbeing BIOGENA commited itself to healt... |
In the newsAll →
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .