LockBit

MITRE G0136Also known as Lockbit 5.0
Reports
10
First seen
Feb 23
Last seen
Jun 19
Motivation
financial, financial extortion

Targeting

Sectors
healthcare ×1

Top ATT&CK techniques

T1486 Data Encrypted for Impact ×7T1566 Phishing ×5T1190 Exploit Public-Facing Application ×3T1027 Obfuscated Files or Information ×3T1005 Data from Local System ×2T1489 Service Stop ×2T1562.001 Impair Defenses: Disable or Modify Tools ×2T1070.001 Indicator Removal: Clear Windows Event Logs ×2T1567 Exfiltration Over Web Service ×2T1105 Ingress Tool Transfer ×2T1195 Supply Chain Compromise ×2T1555 Credentials from Password Stores ×1

Indicators

filename ×66hash_sha256 ×16cve ×5ip_v4 ×4domain ×4url ×1

Indicator values are available on Pro and via the API.

Associated CVEs

Recent reports

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.