Skip to content

LockBit ransomware

Named by 2 kept items in this workspace.

Search every workspace for LockBit ransomware. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • repo2026-10-20It is written here as LockBit ransomware (used as the example query in the quick start; the page does not describe it further).

    used as the example query in the quick start; the page does not describe it further

  • writeup2026-04-17

    Ransomware deployed via compromised Bomgar RMM instances in multiple incidents; threat actors suspected to be using the previously leaked LockBit 3.0 builder (leaked in 2022), based on ransom note style and shared contact email lokbt9@onionmail[.]org.

All threat actors in this workspace.