lockbit5 ransomware group
LockBit 5.0 ("ChuongDong") emerged in September 2025 as the group's resurgence following the February 2024 law enforcement takedown, introducing cross-platform payloads targeting Windows, Linux, and VMware ESXi with enhanced evasion capabilities and continuing the RaaS affiliate model of its predecessors.
- Claims in 7 days
- 4
- Claims in 30 days
- 24
- Reported techniques
- 0
Listings on leak sites are claims by criminals. They are unverified and can be false. coldbraid shows counts here, not names.
Where it claims victims
| Country | Claims in 60 days |
|---|---|
| United States | 4 |
| Thailand | 3 |
| Brazil | 2 |
| Mexico | 2 |
| Italy | 2 |
| India | 1 |
| Indonesia | 1 |
| Lebanon | 1 |
Sectors
| Sector | Claims in 60 days |
|---|---|
| Retail & E-Commerce | 3 |
| Manufacturing | 3 |
| Other | 3 |
| Professional Services | 3 |
| Hospitality | 2 |
| Healthcare | 2 |
| Financial Services | 1 |
| Education | 1 |