GINC-APT-0829 · Criminal

LockBit

Also ABCD, ABCD Ransomware, LockBit 2.0, LockBit 3.0, LockBit Black, Lockbit_RaaS.

Category
Criminal · Financially motivated: ransomware, fraud and theft.
Origin
Russia(medium confidence)
Seen
2019–2024
Status
Active
Sources
3 sources carry it
Identifier
GINC-APT-0829 · lockbit

What it is

LockBit is a ransomware-as-a-service operation known for its fast encryption and double extortion tactics.

Names

The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.

Other names
ABCD, ABCD Ransomware, LockBit 2.0, LockBit 3.0, LockBit Black, Lockbit_RaaS

Attribution

Each attribution is a claim: who makes it, and to whom. Western and Eastern sources are kept apart, as they often disagree.

Targets

Sectors
Critical Infrastructure, Education, Healthcare