LockBit 5.0, also identified by the internal codename "ChuongDong," is the latest iteration of the highly active and financially motivated LockBit ransomware-as-a-service (RaaS) operation, which initially surfaced as "ABCD" ransomware in September 2019. This version emerged in September 2025 as a direct resurgence following a significant international law enforcement disruption in early 2024. The group, assessed with high confidence to be of Russian origin, maintains a consistent focus on financial gain. What distinguishes LockBit 5.0 from other groups and its predecessors is its aggressive evolution toward faster encryption, enhanced cross-platform capabilities including Windows, Linux, and VMware ESXi, and improved evasion techniques like the removal of traditional infection markers and disabling Windows Event Tracing capabilities. The group's resilient RaaS model, which involves core developers maintaining infrastructure while affiliates handle victim targeting and deployment, has c

Paises afectados

Sectores atacados

URLs nuevas detectadas en IntelTracker