Ransomware
lockbit5
0mentions, 7 days
0mentions, 30 days
21victims posted, 30 days
nonelast mentioned
CVEs in recent coverage
No CVEs named alongside this actor in the last 90 days.
Recent victims
- centratamagroup.comNov 4, 2026
- synergy.co.idNov 1, 2026
- susannecerda.comOct 28, 2026
- xspringcapital.comOct 28, 2026
- zelsior.esOct 23, 2026
- mlh.com.lbOct 23, 2026
- dorsiacademy.itOct 23, 2026
- lidoway.comOct 23, 2026
- istanbultrading.comOct 22, 2026
- chooseultimate.comOct 20, 2026
- ock.com.myOct 16, 2026
- karix.comOct 15, 2026
- kidzrkooldental.comOct 15, 2026
- torcivialaw.comOct 15, 2026
- lcww.com.egOct 15, 2026
- neweramachines.comOct 15, 2026
- grupoabg.comOct 15, 2026
- kordhotels.grOct 14, 2026
- skycc.co.thOct 13, 2026
- poolegroup.com.auOct 10, 2026
- saintpierredescorps.frOct 10, 2026
A leak-site post is the group's claim, not confirmed by the victim.
Recent activity
No posts or advisories have named this actor recently.
References
From the MISP threat-actor galaxy, MITRE ATT&CK and RansomLook (CC BY 4.0). Activity is any post or advisory Watch Floor collected that names the actor or one of its aliases.
