LockBit 5.0 Infrastructure Exposed in New Server, IP, and Domain Leak
ID: 583db8da-7df8-5675-92c1-81d0e32ab621
STIX ID: report--583db8da-7df8-5675-92c1-81d0e32ab621
Feed Name: cybersecurityNews.com
Threat Score
Report: Security researcher disclosed that LockBit 5.0’s leak site (karma0.xyz) is hosted at IP 205.185.116.233 (AS53667/PONYNET) and exposes multiple services—including RDP—making the server susceptible to compromise; WHOIS and hosting details are provided, and the article notes LockBit 5.0’s enhanced ransomware capabilities and opsec lapses while urging defenders to block the IP and domain.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.