← Back to all threat actors

lockbit5

LockBit 5.0 ("ChuongDong") emerged in September 2025 as the group's resurgence following the February 2024 law enforcement takedown, introducing cross-platform payloads targeting Windows, Linux, and VMware ESXi with enhanced evasion capabilities and continuing the RaaS affiliate model of its predecessors.

How we source and review actor profiles

Motivation

ransomware

First seen

2026-04-14

Last seen

2026-09-11

Sectors

manufacturing, professional-services, technology, healthcare, agriculture-and-food-production, education, retail-e-commerce, other, hospitality, government-defense, financial-services, business-services

Status

Active

Activity timeline

A dated ledger of actor-claimed victims, campaigns, indicators, identity mappings, relationships, and CVE links. Each date states what it measures. For extensive leak-site histories, victim entries are limited to the 100 most recent distinct listings.

2026-09-11Claimed

Victim claimdrwu.com listed by lockbit5

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2026-09-11Last observed

Indicator23 indicators cataloged

Types: onion.

2026-09-10Claimed

Victim claimalphaomega-eng.com listed by lockbit5

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2026-09-09Claimed

Victim claimamorsaude.com.br listed by lockbit5

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2026-09-08Claimed

Victim claimfdcputman.nl listed by lockbit5

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2026-09-08Claimed

Victim claimcontreras.com.ar listed by lockbit5

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2026-09-07Claimed

Victim claimvsbattorneys.co.za listed by lockbit5

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2026-09-04Claimed

Victim claimhuisartsencentrumkleiniterson.nl listed by lockbit5

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2026-09-04Claimed

Victim claimkalahealth.eu listed by lockbit5

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2026-09-04Claimed

Victim claimpscindustries.com listed by lockbit5

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2026-08-31First listed

Victim claimbartelsbv.nl listed by lockbit5

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2026-08-31First listed

Victim claimvkj.nl listed by lockbit5

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2026-08-31First listed

Victim claimallsteelproducts.nl listed by lockbit5

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2026-08-31First listed

Victim claimbkc.org listed by lockbit5

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2026-08-31Claimed

Victim claimsvfcu.org listed by lockbit5

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2026-08-31Claimed

Victim claimhoaattorneys.com listed by lockbit5

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2026-08-28Claimed

Victim claimapatpa.com listed by lockbit5

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2026-08-27First listed

Victim claimtakt.be listed by lockbit5

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2026-08-27First listed

Victim claimdece.cz listed by lockbit5

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2026-08-27Claimed

Victim claimfpmanagement.nl listed by lockbit5

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2026-08-27First listed

Victim claimtnmed.org listed by lockbit5

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2026-08-26First listed

Victim claimtheheartcenterofmemphis.com listed by lockbit5

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2026-08-23First listed

Victim claimadt.com listed by lockbit5

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2026-08-20First listed

Victim claimusbank.com listed by lockbit5

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

2026-08-17First listed

Victim claimterra-petra.com listed by lockbit5

Actor-claimed victim evidence. This listing is not independent confirmation of compromise.

Actor Claimed

The interactive view includes 101 dated events with category filters and paging.

Identity and attribution

Exact names and tracking identifiers resolve to this canonical profile. Rebrands, affiliations, and overlapping clusters remain separate confidence-rated relationships.

Name map

lockbit5Canonical Name

Loading CVEs, techniques, indicators, malware, victims, and activity...