Lockbit2
| RaaS
LockBit 2.0 is the second major iteration of the LockBit RaaS platform, launched in mid-2021, introducing automated domain-wide encryption via Active Directory Group Policy and claiming the fastest encryption speed among ransomware families, accounting for 46% of ransomware breach events in early 2022.
Victims
1002
First Victim
2021-09-09
(est. attack date)
Discovery Date
2021-09-09
Last Seen
2022-06-28
Inactive Since
4yrs
more than
Avg Delay
N/A
attack→claim
Infostealer
49.2%
victims with domain
Countries
43
hit
Uptime
0.0% avg (30d)
Known Locations (5)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | Status | |
|---|---|---|---|---|---|---|---|---|
|
LOCKFILE | No | 2026-08-22T08:13:13 |
zqaflhty5hyziovsxgqvj2mrz5e5rs6oqxzb54zolccfnvtn5w2johad.onion
|
||||
|
LockBit BLOG | No | 2026-08-22T08:13:22 |
yq43odyrmzqvyezdindg2tokgogf3pn6bcdtvgczpz5a74tdxjbtk2yd.onion
|
||||
|
LockBit BLOG | No | 2026-08-22T08:14:05 |
oyarbnujct53bizjguvolxou3rmuda2vr72osyexngbdkhqebwrzsnad.onion
|
||||
|
LockBit BLOG | No | 2026-08-22T08:13:55 |
lockbitaptstzf3er2lz6ku3xuifafq2yh5lmiqj5ncur6rtlmkteiqd.onion
|
||||
|
LockBit BLOG | No | 2026-08-22T08:13:40 |
lockbitaptq7ephv2oigdncfhtwhpqgwmqojnxqdyhprxxfpcllqdxad.onion
|
Target
Top 5 Activity Sectors
- Manufacturing 168
- Professional Services 167
- Retail & E-Commerce 112
- Technology 80
- Other 49
Top 5 Countries
-
Italy
29
-
Germany
26
-
France
15
-
United States
14
-
Canada
11
Heatmap
KQL Query (1)
-
LockBit 2.0 – New Group Policy Object Followed by Mass Scheduled-Task Deployment
Lateral Movement
Sentinel
T1484.001
YARA Rules (1)
Victims (1002)
