lynx
ransomware group · aka Lynx, Lynx ransomware · unknown · active since 2024-07 (mid-2024; first public vendor reporting by Sekoia and Kroll)
Victims · 7d
0flat
Victims · 30d
1active targets
Victims · 90d
3
All-time (tracked)
418since 2024-08-02
Last post
08-29 02:30UTC
Estimated earnings
—public reporting
Profile · glm-5.3-flash · updated
Lynx is a double-extortion ransomware operation first publicly reported in mid-2024, which researchers (Sekoia, 2024) assess as a likely rebrand or successor of Babuk/BabLock based on code similarities. It operates an affiliate-based RaaS model and ships encryptors for Windows, Linux, and VMware ESXi environments (vendor reporting, 2024-2025). Kroll (2025) describes big-game hunting of mid-sized organizations with initial access typically via compromised credentials or remote-access services, reconnaissance using network scanners, credential theft from Chromium-based browsers, and fast partial encryption using ChaCha20/AES. No public law-enforcement takedown is reported and no vendor or blockchain-analytics earnings estimate is available. The dashboard's tracked leak-site activity shows low recent volume (0 victims in 7 days, 6 in 90 days, last post 2026-08-29).
Tactics & tooling
- Double extortion: steals data before encryption and pressures non-payers via leak-site listings
- Ransomware-as-a-service model using affiliates (vendor reporting, 2024-2025)
- Encryptor variants for Windows, Linux, and VMware ESXi (Sekoia/Kroll, 2024-2025)
- Fast partial encryption of large files using ChaCha20/AES (Kroll, 2025)
- Network reconnaissance with tools such as SoftPerfect Network Scanner (Kroll, 2025)
- Credential harvesting from Chromium-based browser data (Kroll, 2025)
- PowerShell and living-off-the-land activity to disable Defender and delete shadow copies/backups (Kroll, 2025)
- Initial access via compromised credentials or remote-access services; no specific CVEs publicly attributed (unknown)
Targeted sectors
manufacturingprofessional serviceshealthcareconstructioneducationgovernmentfinance
Notable public victims
Kurita (kurita.eu), Wolf Construction (wolfconstruction.net), Jackson County, Indiana (jacksoncountyin.com), Easterseals Iowa (eastersealsia.org)
Estimated earnings
No public figure.
Leak-site victims418 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| Alo Center (hq.aloteknik.se) | · Jan 27, 2025 | ALO started more than 80 years ago as a family-owned business in the heart of Sw... |
| Jacobs & Thompson | · Jan 22, 2025 | Jacobs & Thompson has been in business since 1947, making us one of the most est... |
| Mintz Law Firm, LLC | · Jan 22, 2025 | At Mintz Law Firm, LLC - Personal Injury & Car Accident Lawyers, we care deeply ... |
| Gossett Motor Cars | · Jan 22, 2025 | Al Gossett, president of Gossett Motor Cars, along with his brother David and so... |
| Marukai | · Jan 21, 2025 | Established in 1965, Marukai Corporation (d.b.a Tokyo Central) opened up its bus... |
| Sentinel Systems | · Jan 20, 2025 | Sentinel Systems Corp is a company that operates in the Software industry. It em... |
| Angotti & Reilly | · Jan 20, 2025 | Angotti & Reilly, Inc brings a service-first approach, competitive pricing, and ... |
| Clutch Industries | · Jan 20, 2025 | Mantic Clutch is the performance clutch division of Clutch Industries (CI) which... |
| Kassin & Carrow | · Jan 18, 2025 | At Kassin & Carrow, we strive to give the highest quality personal representatio... |
| Access Capital Partners SA | · Jan 16, 2025 | Today we have for you a special case on our website, some may call an "Anomaly".... |
| Lowe Engineers | · Jan 15, 2025 | The full intimate photos of IT director Loweengineers(Linda Messing) as well as ... |
| Woodport Doors | · Jan 15, 2025 | Woodport Doors offers more than 40 wood species. View the full list of standard ... |
| communisis.com & paragon.world | · Jan 15, 2025 | With a passion for PROGRESSION we make lives better Our passion for progressi... |
| WPD.WOODPORTDOORS.COM | · Jan 14, 2025 | Woodport Doors offers more than 40 wood species. View the full list of standard ... |
| QualiTech (qualitech.com) | · Jan 14, 2025 | QualiTech Environmental provides consulting, training, equipment and support to ... |
| Kinseth Hospitality Companies | · Jan 14, 2025 | Founded in 1957 and headquartered in North Liberty, Iowa, Kinseth Hospitality Co... |
| Douglas County, GA (DDCWSA.COM) | · Jan 14, 2025 | The Douglasville-Douglas County Water and Sewer Authority delivers quality water... |
| SERGAS Group | · Jan 13, 2025 | SERGAS Group is the expert in gas field in Gulf region, managed by an experience... |
| Browdy (bl.local) | · Jan 13, 2025 | Founded in 2002, FisherBroyles, LLP is a full-service law firm with offices acro... |
| PHG CPAs (bushman.biz) | · Jan 13, 2025 | Prince Hansen Group, PLLC is a CPA firm in Salt Lake City offering a complete ra... |
| Nash Brothers Construction (nashdom.local) | · Jan 13, 2025 | Founded in the 1890's, Nash Brothers Construction Company, Inc., has been dedica... |
| Novati Constructions | · Jan 13, 2025 | As a privately owned family company, Novati Constructions Pty Ltd have been prov... |
| Conad (conad.lan) | · Jan 13, 2025 | Conad is an organization that operates through eight large cooperative groups, p... |
| Delap & Waller | · Jan 13, 2025 | We have 300+GB of data leaked from network. -Users Data -Business data -E... |
| Jim Thompson | · Jan 11, 2025 | No brand spells heritage like Jim Thompson, The Thai Silk Company founded in 195... |
| Astaphans | · Jan 11, 2025 | Astaphans : - Super Centre Home & Building Centre Gift Card Auto Centre Shop by ... |
| jimthompson.com | · Jan 8, 2025 | No brand spells heritage like Jim Thompson, The Thai Silk Company founded in 195... |
| astaphans.com | · Jan 8, 2025 | Astaphans : - Super Centre Home & Building Centre Gift Card Auto Centre Shop by ... |
| u0 Excel Transportation | · Jan 7, 2025 | We obtained a vast amount of personal and sensitive data about Excel Transportat... |
| D-7 Roofing | · Jan 7, 2025 | Financial documents, accounting |
| Hunter Taubman Fischer & Li | · Jan 5, 2025 | A lot of confedential data will be published within 2 days The data contains ... |
| Amourgis & Associates | · Jan 3, 2025 | We are a consumer-based personal injury and bankruptcy law firm. That means we n... |
| Farrar & Ball | · Dec 24, 2024 | Confidential information of clients and the company |
| Banner Day Camp | · Dec 19, 2024 | We tried many times to convince Banner Day Camp management to resolve this point... |
| Smith Tank & Steel (smith-tank.com) | · Dec 18, 2024 | Founded in 1977 and headquartered in Gonzales, Louisiana, Smith Tank & Steel pro... |
| CM Buck & Associates | · Dec 16, 2024 | Founded in 1941 by mechanical engineer Chauncey M. Buck, CM Buck & Associates, I... |
| Talascend | · Dec 13, 2024 | Talascend, founded in 1946 and headquartered in Troy, Michigan, is an employment... |
| Goins Law | · Dec 12, 2024 | A large list of data files will be published soon Bank checks Information ab... |
| Gills Onions | · Dec 12, 2024 | Gills Onions: Leaders in Sustainable Onion Production For over 35 years, Gill... |
| GBC | · Dec 12, 2024 | Galaxy is a division of the Crown Telecom Group owned by Crown Capital Partners ... |
| NSK Group ROTA | · Dec 11, 2024 | Manufacturer of steering, suspension, hydraulic and forged parts for commercial,... |
| Hydra-Matic Packing | · Dec 11, 2024 | ACCOUNTING, DRAWINGS, FORMS |
| Equity & Advisory | · Dec 10, 2024 | The Equity & Advisory history dates back to 1997. Our team brings to the table d... |
| Hosting.co.uk | · Dec 9, 2024 | Although The Hosting.co.uk is a small company, the stolen data mainly relates to... |
| Textiles Coated International | · Dec 5, 2024 | TCI (Textiles Coated International) is an American manufacturer of high-performa... |
| New Age Micro | · Dec 3, 2024 | A distinguished product design firm located in Mansfield, MA, New Age Micro has ... |
| Inland Tarp & Liner | · Dec 3, 2024 | Over the past 40 years, Inland Tarp & Liner® has evolved from a hay tarp manufac... |
| Mmaynewagemicro | · Dec 2, 2024 | A distinguished product design firm located in Mansfield, MA, New Age Micro has ... |
| Wisconsin Lifting Specialists | · Nov 26, 2024 | documents, personal info |
| GMG | · Nov 26, 2024 | PASSPORTs, FRESH DOCUMENTs, PERSONAL INFORMATION |
In the newsAll →
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .