About
Aggregated threat-intel descriptionLockBit 3.0 ("LockBit Black"), active since June 2022, is the third iteration of the LockBit RaaS platform incorporating code from BlackMatter ransomware, featuring modular encrypted payloads that evade analysis and targeting Windows and VMware ESXi environments across all sectors globally.
Recent victims
View all →No recent victims.
Found by ThreatCluster
202 total from our crawlListed on this group's leak site and not present in the aggregated feeds.
cclint.com
cclint.com
Sep 24, 2026
castro.net
castro.net
Sep 24, 2026
dsoler.soler.com
dsoler.soler.com
Sep 24, 2026
cachibi.co
cachibi.co
Sep 24, 2026
cardigos.com
cardigos.com
Sep 24, 2026
castro-urdiales.net
castro-urdiales.net
Sep 24, 2026
drsdoors.com
drsdoors.com
Sep 24, 2026
ds.net.au
ds.net.au
Sep 24, 2026
dtstechnical.ca
dtstechnical.ca
Sep 24, 2026
ducab.com
ducab.com
Sep 24, 2026
cachibi.com.co
cachibi.com.co
Sep 24, 2026
callay.com.tr
callay.com.tr
Sep 24, 2026
cargoexperts.eu
cargoexperts.eu
Sep 24, 2026
cassagne.com.ar
cassagne.com.ar
Sep 24, 2026
ccz.com.au
ccz.com.au
Sep 24, 2026
cczstattonequities.com
cczstattonequities.com
Sep 24, 2026
denro.ca
denro.ca
Sep 24, 2026
dgimali.org
dgimali.org
Sep 24, 2026
dlb.it
dlb.it
Sep 24, 2026
cenco-zotti.com
cenco-zotti.com
Sep 24, 2026