Skip to content
Leak site of lockbit3_fs, captured by ThreatCluster

lockbit3_fs

Active

0 tracked victims · Last seen Apr 22, 2026

About

Aggregated threat-intel description

LockBit 3.0 ("LockBit Black"), active since June 2022, is the third iteration of the LockBit RaaS platform incorporating code from BlackMatter ransomware, featuring modular encrypted payloads that evade analysis and targeting Windows and VMware ESXi environments across all sectors globally.

Recent victims

View all →
No recent victims.

Found by ThreatCluster

202 total from our crawl

Listed on this group's leak site and not present in the aggregated feeds.

cclint.com
cclint.com
Sep 24, 2026
castro.net
castro.net
Sep 24, 2026
dsoler.soler.com
dsoler.soler.com
Sep 24, 2026
cachibi.co
cachibi.co
Sep 24, 2026
cardigos.com
cardigos.com
Sep 24, 2026
castro-urdiales.net
castro-urdiales.net
Sep 24, 2026
drsdoors.com
drsdoors.com
Sep 24, 2026
ds.net.au
ds.net.au
Sep 24, 2026
dtstechnical.ca
dtstechnical.ca
Sep 24, 2026
ducab.com
ducab.com
Sep 24, 2026
cachibi.com.co
cachibi.com.co
Sep 24, 2026
callay.com.tr
callay.com.tr
Sep 24, 2026
cargoexperts.eu
cargoexperts.eu
Sep 24, 2026
cassagne.com.ar
cassagne.com.ar
Sep 24, 2026
ccz.com.au
ccz.com.au
Sep 24, 2026
cczstattonequities.com
cczstattonequities.com
Sep 24, 2026
denro.ca
denro.ca
Sep 24, 2026
dgimali.org
dgimali.org
Sep 24, 2026
dlb.it
dlb.it
Sep 24, 2026
cenco-zotti.com
cenco-zotti.com
Sep 24, 2026

All ransomware groups · Dark web intelligence