lockbit5 Ransomware
Tracked since Dec 4, 2025
3
victims recorded
3
in the last 30 days
0
CVEs
1d
Last activity
LockBit 5.0 ("ChuongDong") emerged in September 2025 as the group's resurgence following the February 2024 law enforcement takedown, introducing cross-platform payloads targeting Windows, Linux, and VMware ESXi with enhanced evasion capabilities and continuing the RaaS affiliate model of its predecessors.
Vulnerabilities cited for this group
CVEs associated with the group by ransomware.live. Records not yet published here appear without a link.
No CVE associated with this group in the sources.
Most affected countries (30 days)
- Greece1
- Thailand1
- Australia1
Most affected sectors (30 days)
- Hospitality1
- Other1
- Professional Services1
Victims posted on leak sites, according to ransomware.live. Victim names are not displayed. · View on ransomware.live