LockBit is Back: What’s New in Version 5.0 by Lucie Cardiet

LockBit 5.0 represents the ransomware-as-a-service group's comeback with a modular, stealth-first design that accelerates encryption, improves EDR evasion, and expands affiliate recruitment; the report maps these capabilities across the attack lifecycle (initial access, execution, lateral movement, defense evasion, impact) and provides SOC-focused detection and response guidance to mitigate fast, large-scale extortion and exfiltration campaigns.