lynx
ransomware group · aka Lynx, Lynx ransomware · unknown · active since 2024-07 (mid-2024; first public vendor reporting by Sekoia and Kroll)
Victims · 7d
0flat
Victims · 30d
1active targets
Victims · 90d
3
All-time (tracked)
418since 2024-08-02
Last post
08-29 02:30UTC
Estimated earnings
—public reporting
Profile · glm-5.3-flash · updated
Lynx is a double-extortion ransomware operation first publicly reported in mid-2024, which researchers (Sekoia, 2024) assess as a likely rebrand or successor of Babuk/BabLock based on code similarities. It operates an affiliate-based RaaS model and ships encryptors for Windows, Linux, and VMware ESXi environments (vendor reporting, 2024-2025). Kroll (2025) describes big-game hunting of mid-sized organizations with initial access typically via compromised credentials or remote-access services, reconnaissance using network scanners, credential theft from Chromium-based browsers, and fast partial encryption using ChaCha20/AES. No public law-enforcement takedown is reported and no vendor or blockchain-analytics earnings estimate is available. The dashboard's tracked leak-site activity shows low recent volume (0 victims in 7 days, 6 in 90 days, last post 2026-08-29).
Tactics & tooling
- Double extortion: steals data before encryption and pressures non-payers via leak-site listings
- Ransomware-as-a-service model using affiliates (vendor reporting, 2024-2025)
- Encryptor variants for Windows, Linux, and VMware ESXi (Sekoia/Kroll, 2024-2025)
- Fast partial encryption of large files using ChaCha20/AES (Kroll, 2025)
- Network reconnaissance with tools such as SoftPerfect Network Scanner (Kroll, 2025)
- Credential harvesting from Chromium-based browser data (Kroll, 2025)
- PowerShell and living-off-the-land activity to disable Defender and delete shadow copies/backups (Kroll, 2025)
- Initial access via compromised credentials or remote-access services; no specific CVEs publicly attributed (unknown)
Targeted sectors
manufacturingprofessional serviceshealthcareconstructioneducationgovernmentfinance
Notable public victims
Kurita (kurita.eu), Wolf Construction (wolfconstruction.net), Jackson County, Indiana (jacksoncountyin.com), Easterseals Iowa (eastersealsia.org)
Estimated earnings
No public figure.
Leak-site victims418 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| powelltool.com | · Feb 26, 2025 | Powell Tool Supply specializes in Vendor Managed Inventory solutions, recognizin... |
| ITU AbsorbTech | · Feb 26, 2025 | ITU AbsorbTech has provided industrial services in support of cleaner, safer and... |
| PPS Services Group | · Feb 25, 2025 | PPS Services Group is an international engineering and technical services provid... |
| Vvf Ilinois Services | · Feb 25, 2025 | VVF is a manufacturing and marketing company of personal care products and oleoc... |
| GANRO | · Feb 25, 2025 | Coming soon... |
| acmefan.com | · Feb 25, 2025 | Acme Engineering and Manufacturing Corporation is known worldwide as a leader in... |
| pacresmortgage.com | · Feb 25, 2025 | The PacRes story of growth continues to this day because our employees give ever... |
| Xepa Soul | · Feb 25, 2025 | Xepa-Soul Pattinson (M) Sdn Bhd: A leading pharmaceutical manufacturing enterpri... |
| Geokon | · Feb 24, 2025 | Geokon, Incorporated designs, manufactures and supplies geotechnical sensors and... |
| Planet One | · Feb 24, 2025 | Planet One Pte Ltd is a company that operates in the Custom Software & IT Servic... |
| IDEA Expertises | · Feb 24, 2025 | Créé en 2014, IDEA est un réseau dexperts automobile national et dans les DOM TO... |
| Stürmer Maschinen | · Feb 24, 2025 | Stürmer Maschinen Most of our main importers are in Europe and neighboring coun... |
| stuermer-maschinen.de | · Feb 24, 2025 | Stürmer Maschinen Most of our main importers are in Europe and neighboring coun... |
| Excel Security | · Feb 22, 2025 | Excel provides consulting, executive protection, guard, electronic systems insta... |
| planetone-asia.com | · Feb 22, 2025 | Planet One Pte Ltd is a company that operates in the Custom Software & IT Servic... |
| (kc2) geokon.com | · Feb 21, 2025 | Geokon, Incorporated designs, manufactures and supplies geotechnical sensors and... |
| Fortune Electric Co Ltd | · Feb 20, 2025 | Fortune Electric is a world class manufacturer of oil filled distribution and po... |
| Ranhill Bersekutu | · Feb 19, 2025 | Ranhill Bersekutu together with Ranhill Consulting is a leading Malaysian Bumipu... |
| ranhillbersekutu.com.my | · Feb 18, 2025 | Ranhill Bersekutu together with Ranhill Consulting is a leading Malaysian Bumipu... |
| hamton | · Feb 17, 2025 | Letar du efter presenter eller gåvor till företag? På Hamton i Göteborg hittar d... |
| Hisingstads Bleck | · Feb 17, 2025 | Hisingstads Bleck- och Plåtslageri AB has been in the sheet metal construction b... |
| Leadership Strategies | · Feb 17, 2025 | Take a facilitative approach with Leadership Strategies. We provide expert meeti... |
| Autoschade Pippel | · Feb 17, 2025 | Autoschade Pippel BV is a company that operates in the Investment Banking indust... |
| Pedensia Graphics Distribution | · Feb 17, 2025 | Pedensia Graphics Distribution is a company that operates in the Custom Software... |
| Winbas | · Feb 17, 2025 | Winbas r ett system utvecklat för grossist/handel, entreprenad, bokning/uthyrnin... |
| LINTEC & LINNHOFF Holdings | · Feb 17, 2025 | Lintec & Linnhoff is a global manufacturer and distributor of leading-edge solut... |
| HRS_IDEA_Expertises | · Feb 17, 2025 | Créé en 2014, IDEA est un réseau dexperts automobile national et dans les DOM TO... |
| Allied Tenesis | · Feb 17, 2025 | Our Company Our solutions-based philosophy of producing products that deliver v... |
| Empire Home Center | · Feb 15, 2025 | Over 60 Years of Service In 1955, Harry "Whitey" O'Neill founded Empire Wre... |
| (M)Empire-home-center | · Feb 15, 2025 | Over 60 Years of Service In 1955, Harry "Whitey" O'Neill founded Empire Wre... |
| Societatea Energetica Electrica S.A. | · Feb 12, 2025 | Electrica SA is a power distribution company. It supplies electric power through... |
| The Brown & Hurley Group | · Feb 12, 2025 | Brown and Hurley have been in business in Australia for more than 77 years, and ... |
| Atlas Commodities | · Feb 10, 2025 | Atlas Commodities LLC is a brokerage firm that facilitates trading for both inst... |
| Marshall Motor Holdings | · Feb 10, 2025 | Marshall Motor Group is the 7th largest motor dealer group in the UK. Since 2008... |
| Lexington Electric | · Feb 7, 2025 | Lexington Electric System is a public utility owned by the city of Lexington, Te... |
| Shinsung Delta Tech | · Feb 5, 2025 | Coming soon... |
| Banfi Vintners | · Feb 5, 2025 | Banfi Vintners, the exclusive importer of Riunite in the United States, was foun... |
| Zamzow's | · Feb 1, 2025 | How is Zamzows.com secured? What attack vectors might be relevant? We explore th... |
| Wireless Solutions (Morris.Domain) | · Feb 1, 2025 | Wireless Solutions is a wholesale, stocking distributor of Motorola Solutions tw... |
| Silverado Contractors | · Jan 30, 2025 | Silverado Contractors is a premier demolition and environmental remediation comp... |
| Engine Power Source | · Jan 30, 2025 | We have over 1TB of critical data, including personal employee and partner infor... |
| Jalaram Produce | · Jan 30, 2025 | Jalaram Produce offers a high-quality line of the freshest produce delivered dai... |
| KPI Engineering | · Jan 30, 2025 | KPI Engineering, Inc. is a small business specializing in Mechanical, Electrical... |
| Scott Engineering | · Jan 30, 2025 | Scott Engineering is a manufacturer of medium voltage padmounted equipment for t... |
| Tri-Sen Systems | · Jan 30, 2025 | Tri-Sen Systems Corporation, based in Houston, Texas, provides turbomachinery co... |
| The Wendt Agency | · Jan 29, 2025 | The Wendt Agency is a full-service advertising agency located in downtown Great ... |
| Rossi Real Estate (ROSSIDG.LOCAL) | · Jan 29, 2025 | Rossi Real Estate Corp. is a trusted family-owned and operated real estate broke... |
| Delta Screen & Filtration () | · Jan 29, 2025 | Delta Screens manufactures a variety of flat screens with exceptional rigidity a... |
| Strategic Materials | · Jan 29, 2025 | Strategic Materials, Inc. is a recycling company. It processes recycled glass an... |
| sce.org.sg | · Jan 28, 2025 | The Singapore Cooperation Enterprise (SCE) was set up by the Ministry of Trade a... |
In the newsAll →
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .