Skip to content
RansomwareFinancialAdvanced sophistication

Lockbit5

Lockbit5 is a ransomware group with a financial motive, tracked by Brandefense. It targets 17 sectors, including Government and Technology, in 46 countries, including the United States and the United Kingdom. It uses 22 MITRE ATT&CK techniques.

Also known as
  • lockbit5 Team
  • LockBit Black
  • LockBit 4.0
Techniques
22
Exploited CVEs
No CVE data
First seen
Dec 4, 2025
Last seen
Sep 8, 2026
Record updated

Who They Target.

About Lockbit5.

LockBit 5.0 ("ChuongDong") emerged in September 2025 as the group's resurgence following the February 2024 law enforcement takedown, introducing cross-platform payloads targeting Windows, Linux, and VMware ESXi with enhanced evasion capabilities and continuing the RaaS affiliate model of its predecessors.

Last updated Sep 22, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.