LockBit (ELF)
- Malware type
- ransomware
- Family
- Malware family
- Profile updated
- 2026-07-07 13:02:44
Targeted industries: financial-services healthcare-and-pharmaceutical government-and-public-sector energy-and-utilities manufacturing technology-and-telecommunications
Context
LockBit (ELF) is a ransomware variant targeting Linux systems, chiefly associated with multinational operations and extensive extortion schemes, impacting multiple industries globally.
Used by threat actors
- BITWISE SPIDER (threat-actor)
Reports & references
- Microsoft — Ransomware As A Service Understanding The Cybercrime Gig Economy And How To Protect Yourself (report)
- CrowdStrike — Better Together Global Attitude Survey Takeaways 2021 (report)
- socradar.io — Lockbit 3 Another Upgrade To Worlds Most Active Ransomware (report)
- security.packt.com — Understanding Lockbit (report)
- services.google.com — M Trends 2025 En (report)
- blogs.vmware.com — Esxi Targeting Ransomware The Threats That Are After Your Virtual Machines Part 1 (report)
- trellix.com — Conti Leaks Examining The Panama Papers Of Ransomware (report)
- blog.compass-security.com — Vpn Appliance Forensics (report)
- lifars.com — Lockbitransomware Whitepaper (report)
- bleepingcomputer.com — Lockbit Victim Estimates Cost Of Ransomware Attack To Be 42 Million (report)
- dragos.com — Dragos Ics Ot Ransomware Analysis Q4 2021 (report)
- fortinet.com — Ransomware Roundup New Variants (report)
- ic3.gov — 220204 (report)
- Trend Micro — Analysis And Impact Of Lockbit Ransomwares First Linux And Vmware Esxi Variant (report)
- krebsonsecurity.com — Russian Hacker Wazawaka Indicted For Ransomware (report)
- Cisco Talos — Talos Ir Q2 2023 Quarterly Recap (report)
- noticeofpleadings.com — 1%20 Microsoft%20Cobalt%20Strike%20 %20Complaint(907040021.9) (report)
- malpedia.caad.fkie.fraunhofer.de — Elf.Lockbit (report)
- Kaspersky — 110068 (report)
- analyst1.com — Lockbit Takedown Operation Cronos A Long Awaited Psyops Against Ransomware (report)
- analyst1.com — Ransomware Diaries Volume 3 Lockbits Secrets (report)
- europol.europa.eu — Law Enforcement Disrupt Worlds Biggest Ransomware Operation (report)
- Trend Micro — Lockbit 5 Targets Windows Linux Esxi (report)
- github.com — Pti 257 (report)
- levelblue.com — 19 Shades Of Lockbit5.0 Inside The Latest Cross Platform Ransomware Part 1 (report)