Thecyberexpress LockBit Ransomware Group Launches New Data Leak Site and Upgrades to Version 5.0
Article Content
Browse articles 
The LockBit ransomware group has returned with a new data leak site, claiming seven new victims. Following a series of law enforcement actions in early 2024 that disrupted its operations, LockBit has introduced version 5.0 in late September 2025, featuring a refined modular two-stage deployment model aimed at enhancing evasion and bypassing endpoint detection and response systems.
Ask AI about this cluster
Answers cite the sources they use
Updated 218d ago How this analysis works
More articles in this cluster (3)
Following this threat?
Track Akira and ABCD ransomware in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Chinese Smishing Gang Targets Ireland and Four Other EU Countries Ireland is identified as one of five EU countries targeted by the Chinese text-scam group known as Smishing Triad, as reported by the EU cyber security agency Enisa. This group conducts large-scale smishing operations, which involve sending fraudulent text messages that impersonate legitimate organizations to steal… 
Attackers Exploit MFA Gaps in SonicWall VPN Access On August 4, 2026, an Akira ransomware affiliate successfully accessed a SonicWall SSL VPN by spraying passwords, exploiting the lack of multi-factor authentication (MFA). After gaining access, the attacker used RDP to reach the domain controller and enumerate Active Directory, although the ransomware deployment…