LockBit

Also known as: LockBit Black, LockBit 5.0, LockBit Green

Overview

Most prolific RaaS operation globally despite multiple law enforcement disruptions. Version 5.0 features AI-assisted target selection and automated lateral movement.

MITRE ATT&CK Coverage

Recon
Res Dev
Init Access
Execution
Persistence
Priv Esc
Def Evasion
Cred Access
Discovery
Lat Move
Collection
C2
Exfil
Impact
5 of 14 tactics observed

Raw TTPs

Ransomware-as-a-ServiceTriple ExtortionAI-Assisted TargetingAutomated Lateral MovementESXi Encryption

Related Intelligence (2)

CRITICALRansomwareExploited

LockBit 5.0 Deploys AI-Powered Ransomware with Automated Network Mapping

LockBit 5.0 features AI module for automated reconnaissance, high-value target identification, and optimized encryption timing.

Windows Server 2022/2025
FBI Flash Alert
LOWRansomware

LockBit Affiliate Arrested — Europol Seizes $14M in Cryptocurrency

Europol arrests LockBit affiliate in Ukraine and seizes $14M in cryptocurrency. Suspect linked to attacks on 150+ organizations.

N/A
Europol / FBI