THE RETURN OF LOCKBIT!
ID: 369aa300-71ed-55a8-93df-6aec74f9c70c
STIX ID: report--369aa300-71ed-55a8-93df-6aec74f9c70c
Feed Name: THE RAVEN FILE
This intelligence article documents the resurgence of the LockBit ransomware operation after law-enforcement disruptions, detailing new leak sites, TOR mirror and torrent infrastructure, victim negotiation timelines and notable victims, sample hashes and VHash patterns, exposed IPs and hosting ASNs, BTC/XMR wallets, and evolving RaaS panels (LockBit 4.0/5.0). The report provides extensive IOCs (onion domains, file servers, IPs, hashes) and operational observations (use of torrents, mirrored DLS, affiliate activity, panel infiltrations) intended for tracking and hunting LockBit activity.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.