Uptime Hamster: 10d 8h 30mDeploy: 14 Jul 2026 21:26Updated: 2026-07-21
Logo del actor de amenaza lockbit3

lockbit3

2 incidentes 1 paises 1 sectores ransomware RU Ultimo: 2026-06-29
Aliases: LockBit Black, lockbit3, ABCD ransomware, lockbit, Babuk, Conti, LockBit 3
Ver en IntelTracker → APTTrail →
LockBit 3.0, also known as LockBit Black, is a financially motivated cybercriminal group that operates an affiliate-based ransomware-as-a-service (RaaS) model. It emerged in March 2022 as a significant evolution from previous LockBit versions, incorporating features from the BlackMatter ransomware family, which represented an architectural overhaul and enhanced technical capabilities. Assessed with moderate confidence to be of Russian origin, the group is primarily driven by financial gain. LockBit 3.0 distinguishes itself through its exceptionally rapid encryption speed, a unique bug bounty program for its ransomware, and its pioneering adoption of triple extortion tactics, which include data encryption, data exfiltration with leak threats, and distributed denial-of-service (DDoS) attacks. The group is known for its high volume of incidents globally across various sectors.

Aliases del actor

LockBit Blacklockbit3ABCD ransomwarelockbitBabukContiLockBit 3

Actores similares

lockbit3_fsransomware · 2lockbit2ransomware · 1002lockbit5ransomware · 278lockbitransomware · 1LockBitactor · 2blackbastaransomware · 523contiransomware · 351blacksuitransomware · 184babuk2ransomware · 180blackbyteransomware · 147

Canales, DLS e infraestructura asociada

Clasificacion automatica desde IntelTracker/APTTrail/OSINT. Estado real solo si viene indicado por la fuente.

TipoEstadoHost / enlaceTitle / ultimo titulo
DLS / onionunknownlockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onionlockbit3_fs
DLS / onionunknownlockbit7z2mmiz3ryxafn5kapbvbbiywsxwovasfkgf5dqqp5kxlajad.onionlockbit3_fs
DLS / leak siteupransomware.anggipradana.comRansomware Group: lockbit3_fs
Malware asociado
Lumma Stealer, RedLine Stealer, apk.alien, win.agent_tesla, Backdoor.Oldrea, SpyAgent
Tecnicas MITRE
T1567 - Exfiltration Over Web Service, T1031 - Modify Existing Service, T1547 - Boot or Logon Autostart Execution, T1530 - Data from Cloud Storage Object, T1113 - Screen Capture, T1110 - Brute Force
Victimas
0
TTPs unicas
0
Info robada historica
N/D
Rescates reclamados
N/D
Pagos detectados
N/D

Paises afectados

United States (1)

Paises objetivo (SOCRadar)

United Arab EmiratesAfghanistanAlbaniaArmeniaAngolaArgentinaAustriaAustraliaAzerbaijanBosnia and Herzegovina

Sectores atacados

Software (1)

Sectores objetivo (SOCRadar)

Construction of BuildingsFood ManufacturingOther Information ServicesMonetary Authorities-Central BankRail TransportationSoftware PublishersReal EstateRental and Leasing ServicesHospitalsEnterprises & Holding

URLs nuevas detectadas en IntelTracker

ransomware.anggipradana.com