All Threat Groups
ID: lockbit2
Lockbit2 Syndicate Dossier
First Intercepted
2021-09-09
Latest Disclosure
2022-06-28
Victim Velocity
1.0 / claim
Threat Profile & Operational Narrative
Launched in June 2021 as a major evolution of the LockBit RaaS operation, LockBit 2.0 featured an ultrafast multithreaded C/C++ encryption binary engineered to automate self-propagation across Windows domains via Active Directory Group Policy Objects (GPOs). The group targeted commercial enterprises, manufacturing, and healthcare worldwide using the StealBit exfiltration engine while maintaining strict rules against targeting CIS nations. Affiliates established entry by exploiting perimeter vulnerabilities in Fortinet and Pulse Secure devices, purchasing broker access, and brute-forcing remote access ports.
Tactics, Techniques & Procedures (MITRE ATT&CK)
T1190: Exploit Public-Facing Application T1078: Valid Accounts T1110: Brute Force T1484.001: Group Policy Modification T1021.002: SMB/Windows Admin Shares T1047: Windows Management Instrumentation T1059.003: Windows Command Shell T1562.001: Disable or Modify Tools T1490: Inhibit System Recovery T1486: Data Encrypted for Impact T1041: Exfiltration Over C2 Channel
Known Dark Web Infrastructure & Mirrors
zqaflhty5hyziovsxgqvj2mrz5e5rs6oqxzb54zolccfnvtn5w2johad.onion
OFFLINE
yq43odyrmzqvyezdindg2tokgogf3pn6bcdtvgczpz5a74tdxjbtk2yd.onion
OFFLINE
oyarbnujct53bizjguvolxou3rmuda2vr72osyexngbdkhqebwrzsnad.onion
OFFLINE
lockbitaptstzf3er2lz6ku3xuifafq2yh5lmiqj5ncur6rtlmkteiqd.onion
OFFLINE
lockbitaptq7ephv2oigdncfhtwhpqgwmqojnxqdyhprxxfpcllqdxad.onion
OFFLINE
Disclosed Victims & Incident Archive (1,201)
| Disclosed | Victim Organization | Sector | Country |
|---|---|---|---|
| 2022-06-28 | datalit.it | General | -- |
| 2022-06-26 | oak-brook.org | General | -- |
| 2022-06-21 | ecos-office.com | General | -- |
| 2022-06-21 | coteg-azam.fr | General | -- |
| 2022-06-21 | sigma-alimentos... | General | -- |
| 2022-06-21 | farmaciacirici.com | General | -- |
| 2022-06-21 | farmaciacirici.... | General | -- |
| 2022-06-21 | agricolaandrea.... | General | -- |
| 2022-06-20 | business.gov.om | General | -- |
| 2022-06-20 | builditinc.com | General | -- |
| 2022-06-20 | rhenus.group | General | -- |
| 2022-06-20 | kuwaitairways.com | General | -- |
| 2022-06-20 | kuwaitairways.c... | General | -- |
| 2022-06-20 | plagepalace.com | General | -- |
| 2022-06-20 | emprint.com | General | -- |
| 2022-06-20 | acac.com | General | -- |
| 2022-06-19 | optoma | General | -- |
| 2022-06-18 | vectorinf.com.br | General | -- |
| 2022-06-18 | vectorinf.com.b... | General | -- |
| 2022-06-18 | tb-kawashima.co... | General | -- |
| 2022-06-18 | lundinroof.com | General | -- |
| 2022-06-17 | keisei- | General | -- |
| 2022-06-17 | https://www.tb-... | General | -- |
| 2022-06-17 | http://www.lund... | General | -- |
| 2022-06-17 | bestatt | General | -- |
| 2022-06-16 | bestattung- | General | -- |
| 2022-06-16 | ardebolassessor | General | -- |
| 2022-06-15 | dgi.gouv.ml | General | -- |
| 2022-06-14 | medcoenergi.com | General | -- |
| 2022-06-14 | genusplc.com | General | -- |
| 2022-06-14 | enclosuresoluti | General | -- |
| 2022-06-14 | https://www.dgi... | General | -- |
| 2022-06-14 | gruppowasteitalia.it | General | -- |
| 2022-06-14 | gruppowasteital... | General | -- |
| 2022-06-13 | ptg.com.au | General | -- |
| 2022-06-12 | slgienergy.com | General | -- |
| 2022-06-12 | sanvitale.r | General | -- |
| 2022-06-11 | ses | General | -- |
| 2022-06-10 | www.vectorinf.c... | General | -- |
| 2022-06-10 | cargoexperts.eu | General | -- |
| 2022-06-09 | kaisoten.co.jp | General | -- |
| 2022-06-09 | virtus- | General | -- |
| 2022-06-07 | equis.com | General | -- |
| 2022-06-07 | gpml | General | -- |
| 2022-06-07 | https://www.equ... | General | -- |
| 2022-06-06 | mandiant.com | General | -- |
| 2022-06-06 | kan | General | -- |
| 2022-06-06 | sesver.gob.mx | General | -- |
| 2022-06-06 | patralogistik.com | General | -- |
| 2022-06-06 | patralogistik.c... | General | -- |
| 2022-06-06 | linmark.com | General | -- |
| 2022-06-06 | hyatts.com | General | -- |
| 2022-06-06 | IBRCN.COM | General | -- |
| 2022-06-05 | kansashighwaypatrol.org | General | -- |
| 2022-06-05 | kansashighwaypa... | General | -- |
| 2022-06-05 | bestattung-walzer.at | General | -- |
| 2022-06-05 | bestattung-walz... | General | -- |
| 2022-06-04 | vainieritrasporti.com | General | -- |
| 2022-06-04 | vainieritraspor... | General | -- |
| 2022-06-04 | rosagroup | General | -- |
| 2022-06-04 | wik-group.com | General | -- |
| 2022-06-04 | specpharm.co.za | General | -- |
| 2022-06-04 | ora.com | General | -- |
| 2022-06-04 | colonail.com | General | -- |
| 2022-06-04 | familyclinicbridgeport.com | General | -- |
| 2022-06-04 | familyclinicbri... | General | -- |
| 2022-06-03 | sport | General | -- |
| 2022-06-02 | closetheloopeu.com | General | -- |
| 2022-06-02 | closetheloopeu.... | General | -- |
| 2022-06-02 | jewelry.or | General | -- |
| 2022-06-02 | compagniedep | General | -- |
| 2022-06-02 | hilltopconstruc | General | -- |
| 2022-06-02 | cepima | General | -- |
| 2022-06-01 | bradfo | General | -- |
| 2022-05-30 | intertabak.com | General | -- |
| 2022-05-30 | inla | General | -- |
| 2022-05-30 | tcpharmachem.com | General | -- |
| 2022-05-30 | tcpharmachem.co... | General | -- |
| 2022-05-30 | gpmlife.com | General | -- |
| 2022-05-29 | foxconnbc.com | General | -- |
| 2022-05-29 | koenigstahl.pl | General | -- |
| 2022-05-29 | pauly.de | General | -- |
| 2022-05-29 | hospitalsanjose.es | General | -- |
| 2022-05-29 | hospitalsanjose... | General | -- |
| 2022-05-27 | kerrylog | General | -- |
| 2022-05-27 | skinnertran | General | -- |
| 2022-05-26 | ils.theinnovatecompanies.com | General | -- |
| 2022-05-26 | ils.theinnovate... | General | -- |
| 2022-05-26 | edm-stone.com | General | -- |
| 2022-05-25 | pointsbet.com | General | -- |
| 2022-05-24 | vitalprev.com.br | General | -- |
| 2022-05-24 | vitalprev.com.b... | General | -- |
| 2022-05-24 | https://www.vit... | General | -- |
| 2022-05-24 | pet-link.com | General | -- |
| 2022-05-24 | kuwaitflourmills.com | General | -- |
| 2022-05-24 | kuwaitflourmill... | General | -- |
| 2022-05-24 | erdwaerme-gruenwald.de | General | -- |
| 2022-05-24 | erdwaerme-gruen... | General | -- |
| 2022-05-24 | architectenbureaugofflo.be | General | -- |
| 2022-05-24 | architectenbure... | General | -- |
Showing 100 most recent disclosures of 1,201 total records. Use the Live Feed or API for complete records.