lockbit3 Ransomware
Tracked since Jun 29, 2022
0
victims recorded
0
in the last 30 days
0
CVEs
—
Last activity
LockBit, also recognized as LockBit Black or Lockbit 3.0, is one of the largest Ransomware Groups in the world and has orchestrated extensive cyberattacks across various industries, impacting thousands of organizations globally with its relentless and adaptive strategies.
Vulnerabilities cited for this group
CVEs associated with the group by ransomware.live. Records not yet published here appear without a link.
No CVE associated with this group in the sources.
Observed tools
Credential Theft
Gosecretsdump · LaZagne · LostMyPassword · Mimikatz · NirSoft ExtPassword · PasswordFox · ProcDump · Veeam-Get-Creds
Defense Evasion
Backstab (Process Explorer driver) · Defender Control · GMER · PCHunter · PowerTool · ProcessHacker · TDSSKiller
Discovery Enum
AdFind · Advanced IP Scanner · Advanced Port Scanner · Bloodhound · Seatbelt · SoftPerfect NetScan
Exfiltration
Anonfiles · FileZilla · File[.]io · FreeFileSync · MEGA · RClone · Sendspace · Temp[.]sh · Tempsend · Transfer[.]sh · Transfert-my-files · WinSCP
LOLBAS
BCDEdit · PsExec
Networking
Ligolo · Ngrok · Plink
Offsec
Cobalt Strike · Impacket · Koadic · Metasploit · PowerShell Empire · ThunderShell
RMM-Tools
Action1 · AnyDesk · FixMeIt · ScreenConnect · Splashtop · TeamViewer · ZohoAssist
Victims posted on leak sites, according to ransomware.live. Victim names are not displayed. · View on ransomware.live