LockBit (Windows)

Aliases: ABCD Ransomware

Malware type
ransomware
Family
Malware family
Last IoC activity
2026-07-22 04:04:50
Profile updated
2026-07-07 12:47:15

Targeted industries: financial-services government-and-public-sector healthcare-and-pharmaceutical manufacturing technology-and-telecommunications transportation-and-logistics

Context

LockBit is a ransomware family known for targeting various industries globally, encrypting files and demanding ransom payments. It has evolved over time, using advanced encryption techniques to pressure victims into paying for the decryption key.

Used by threat actors

Exploited vulnerabilities

  • CVE-2023-27350 (vulnerability)

Reports & references

  • CrowdStrike — Double Trouble Ransomware Data Leak Extortion Part 1 (report)
  • analyst1.com — Ransom Mafia Analysis Of The World%E2%80%99S First Ransomware Cartel (report)
  • CrowdStrike — Report2021Gtr (report)
  • analyst1.com — Ransom Mafia Analysis Of The Worlds First Ransomware Cartel (report)
  • Microsoft — Ransomware As A Service Understanding The Cybercrime Gig Economy And How To Protect Yourself (report)
  • sentinelone.com — Lockbit Ransomware Side Loads Cobalt Strike Beacon With Legitimate Vmware Utility (report)
  • CrowdStrike — Better Together Global Attitude Survey Takeaways 2021 (report)
  • socradar.io — Lockbit 3 Another Upgrade To Worlds Most Active Ransomware (report)
  • security.packt.com — Understanding Lockbit (report)
  • Trend Micro — Ransomware Spotlight Lockbit (report)
  • services.google.com — M Trends 2025 En (report)
  • news.sophos.com — Cryptoguard An Asymmetric Approach To The Ransomware Battle (report)
  • sentinelone.com — Nullbulge Threat Actor Masquerades As Hacktivist Group Rebelling Against Ai (report)
  • Kaspersky — 114990 (report)
  • services.google.com — Threat Horizons Report H1 2025 (report)
  • forescout.com — New Ransomware Operator Exploits Fortinet Vulnerability Duo (report)
  • therecord.media — New Hacker Group Lockbit Target Russia (report)
  • CrowdStrike — Big Game Hunting On The Rise Again According To Ecrime Index (report)
  • docs.google.com — 1Mi8Z2Tbhmqq5X8Wf Ozv3Dvjz5Sjos 3 (report)
  • ke-la.com — Zooming Into Darknet Threats Targeting Jp Orgs Kela (report)
  • news.sophos.com — The Ransomware Threat Intelligence Center (report)
  • Broadcom/Symantec — The Ransomware Threat September 2021 (report)
  • therecord.media — An Interview With Blackmatter A New Ransomware Group Thats Learning From The Mistakes Of Darkside And Revil (report)
  • bleepingcomputer.com — Popular Russian Hacking Forum Xss Bans All Ransomware Topics (report)
  • coveware.com — Ransomware Attack Vectors Shift As New Software Vulnerability Exploits Abound (report)

External references