- Category
- Criminal · Financially motivated: ransomware, fraud and theft.
- Origin
- Russia(medium confidence)
- Seen
- 2019–2024
- Status
- Active
- Sources
- 3 sources carry it
- Identifier
- GINC-APT-0829 · lockbit
What it is
LockBit is a ransomware-as-a-service operation known for its fast encryption and double extortion tactics.
Names
The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.
- Other names
- ABCD, ABCD Ransomware, LockBit 2.0, LockBit 3.0, LockBit Black, Lockbit_RaaS
Attribution
Each attribution is a claim: who makes it, and to whom. Western and Eastern sources are kept apart, as they often disagree.
Western sources
Targets
- Sectors
- Critical Infrastructure, Education, Healthcare