Classic Brechas Mapa Actores TTP Matrix Analitica Alertas CyberNews Arsenal Exploits KillChain Origen SSLBL RansomLook Ransomwhere

lockbit3

2 incidentes 1 paises 1 sectores threat-actor RU Ultimo: 2026-06-29

Aliases: LockBit Black, lockbit3, ABCD ransomware, lockbit, Babuk, Conti, LockBit 3

Ver en IntelTracker → APTTrail →

LockBit 3.0, also known as LockBit Black, is a financially motivated cybercriminal group that operates an affiliate-based ransomware-as-a-service (RaaS) model. It emerged in March 2022 as a significant evolution from previous LockBit versions, incorporating features from the BlackMatter ransomware family, which represented an architectural overhaul and enhanced technical capabilities. Assessed with moderate confidence to be of Russian origin, the group is primarily driven by financial gain. LockBit 3.0 distinguishes itself through its exceptionally rapid encryption speed, a unique bug bounty program for its ransomware, and its pioneering adoption of triple extortion tactics, which include data encryption, data exfiltration with leak threats, and distributed denial-of-service (DDoS) attacks. The group is known for its high volume of incidents globally across various sectors.

Aliases del actor

LockBit Black lockbit3 ABCD ransomware lockbit Babuk Conti LockBit 3

Actores similares

lockbit3_fsthreat-actor · 2 lockbit2ransomware · 1002 lockbit5ransomware · 278 LockBitactor · 2 lockbitthreat-actor · 1 lockbit4threat-actor · 0 LockBit 5.0threat-actor · 0 blackbastaransomware · 523 contiransomware · 351 blacksuitransomware · 184

Canales, DLS e infraestructura asociada

Clasificacion automatica desde IntelTracker/APTTrail/OSINT. Estado real solo si viene indicado por la fuente.

Tipo	Estado	Host / enlace	Title / ultimo titulo
DLS / leak site	up	ransomware.anggipradana.com	Ransomware Group: lockbit3_fs
DLS / onion	unknown	lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion	lockbit3_fs
DLS / onion	unknown	lockbit7z2mmiz3ryxafn5kapbvbbiywsxwovasfkgf5dqqp5kxlajad.onion	lockbit3_fs
DLS / onion	offline	lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion	marktsec
DLS / onion	offline	lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion	CTI.FYI
DLS / onion	offline	lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion	CTI.FYI
DLS / onion	offline	lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion	CTI.FYI
DLS / onion	offline	lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion	CTI.FYI
DLS / onion	offline	lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion	CTI.FYI
DLS / onion	offline	lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion	CTI.FYI
DLS / onion	offline	lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion	CTI.FYI
DLS / onion	offline	lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion	CTI.FYI
DLS / onion	offline	lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion	CTI.FYI
DLS / onion	offline	lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion	CTI.FYI
DLS / onion	offline	lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion	CTI.FYI
DLS / onion	offline	lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion	CTI.FYI
DLS / onion	offline	lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion	CTI.FYI
DLS / onion	offline	lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion	CTI.FYI
DLS / onion	offline	lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion	CTI.FYI
DLS / onion	offline	lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion	CTI.FYI
DLS / onion	offline	lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion	CTI.FYI
DLS / onion	offline	lockbitsup4yezcd5enk5unncx3zcy7kw6wllyqmiyhvanjj352jayid.onion	CTI.FYI
DLS / onion	unknown	lockbit7ouvrsdgtojeoj5hvu6bljqtghitekwpdy3b6y62ixtsu5jqd.onion	marktsec
DLS / onion	offline	lockbit6knrauo3qafoksvl742vieqbujxw7rd6ofzdtapjb4rrawqad.onion	CTI.FYI
DLS / onion	offline	lockbit4lahhluquhoka3t4spqym2m3dhe66d6lr337glmnlgg2nndad.onion	CTI.FYI
DLS / onion	offline	lockbit3olp7oetlc4tl5zydnoluphh7fvdt5oa6arcp2757r7xkutid.onion	CTI.FYI
DLS / onion	offline	lockbit435xk3ki62yun7z5nhwz6jyjdp2c64j5vge536if2eny3gtid.onion	CTI.FYI
DLS / onion	offline	lockbit3g3ohd3katajf6zaehxz4h4cnhmz5t735zpltywhwpc6oy3id.onion	CTI.FYI
DLS / onion	offline	lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion	CTI.FYI
DLS / onion	offline	ofj3oaltwaf67qtd7oafk5r44upm6wkc2jurpsdyih2c7mbrbshuwayd.onion	CTI.FYI

Malware asociado

Lumma Stealer, RedLine Stealer, apk.alien, win.agent_tesla, Backdoor.Oldrea, SpyAgent

Tecnicas MITRE

T1567 - Exfiltration Over Web Service, T1031 - Modify Existing Service, T1547 - Boot or Logon Autostart Execution, T1530 - Data from Cloud Storage Object, T1113 - Screen Capture, T1110 - Brute Force

Victimas

TTPs unicas

Info robada historica

N/D

Rescates reclamados

N/D

Pagos detectados

N/D

Paises afectados

United States (1)

Paises objetivo (OSINT)

United Arab EmiratesAfghanistanAlbania

ArmeniaAngola

Argentina

Austria

Australia

AzerbaijanBosnia and Herzegovina

Sectores atacados

Software (1)

Sectores objetivo (OSINT)

Construction of BuildingsFood ManufacturingOther Information ServicesMonetary Authorities-Central BankRail TransportationSoftware PublishersReal EstateRental and Leasing ServicesHospitalsEnterprises & Holding

URLs nuevas detectadas en IntelTracker

ransomware.anggipradana.com