lockbit5
5 victims claimedFirst seen Oct 22, 2026Last post 2d ago23 known sitesAssessed nexus: Russia
LockBit: FBI/NCA Operation Cronos (2024) named the lead administrator, LockBitSupp, as a Russian national
Profile
LockBit 5.0 ("ChuongDong") emerged in September 2025 as the group's resurgence following the February 2024 law enforcement takedown, introducing cross-platform payloads targeting Windows, Linux, and VMware ESXi with enhanced evasion capabilities and continuing the RaaS affiliate model of its predecessors.
Targeted sectors
- Education1
- Professional Services1
- Retail & E-Commerce1
Targeted countries
- Italy1
- Lebanon1
- LI1
- Spain1
- Turkey1
Most recent victims
- dorsiacademy.itEducation · Italy2d ago
- mlh.com.lbProfessional Services · Lebanon2d ago
- lidoway.comLI2d ago
- zelsior.esSpain2d ago
- istanbultrading.comRetail & E-Commerce · Turkey3d ago