Contact us Buy Me a Coffee

Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Lockbit3_fs

| RaaS

LockBit 3.0 ("LockBit Black"), active since June 2022, is the third iteration of the LockBit RaaS platform incorporating code from BlackMatter ransomware, featuring modular encrypted payloads that evade analysis and targeting Windows and VMware ESXi environments across all sectors globally.

Known Locations (26)
Favicon Title Type Available Last Visit Server Info FQDN
favicon LockBit - Leaked Yes 2026-05-06T23:37:29 NGINX nginx lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion
favicon LockBit - Leaked No 2026-04-28T07:24:38 lockbit7z2mmiz3ryxafn5kapbvbbiywsxwovasfkgf5dqqp5kxlajad.onion
favicon LockBit - Leaked No 2026-04-28T07:27:11 NGINX nginx lockbit7z2og4jlsmdy7dzty3g42eu3gh2sx2b6ywtvhrjtss7li4fyd.onion
favicon LockBit - Leaked Yes 2026-05-06T23:42:52 NGINX nginx lockbit7z355oalq4hiy5p7de64l6rsqutwlvydqje56uvevcc57r6qd.onion
favicon LockBit - Leaked Yes 2026-05-06T23:45:04 NGINX nginx lockbit7z36ynytxwjzuoao46ck7b3753gpedary3qvuizn3iczhe4id.onion
favicon LockBit - Leaked Yes 2026-05-06T23:46:08 NGINX nginx lockbit7z37ntefjdbjextn6tmdkry4j546ejnru5cejeguitiopvhad.onion
favicon LockBit - Leaked Yes 2026-05-06T23:47:13 NGINX nginx lockbit7z3azdoxdpqxzliszutufbc2fldagztdu47xyucp25p4xtqad.onion
favicon LockBit - Leaked Yes 2026-05-06T23:36:16 NGINX nginx lockbit7z3ddvg5vuez2vznt73ljqgwx5tnuqaa2ye7lns742yiv2zyd.onion
favicon LockBit - Leaked Yes 2026-05-06T23:48:23 NGINX nginx lockbit7z3hv7ev5knxbrhsvv2mmu2rddwqizdz4vwfvxt5izrq6zqqd.onion
favicon LockBit - Leaked Yes 2026-05-06T23:56:10 NGINX nginx lockbit7z3ujnkhxwahhjduh5me2updvzxewhhc5qvk2snxezoi5drad.onion
favicon LockBit - Leaked Yes 2026-05-06T23:40:32 NGINX nginx lockbit7z4bsm63m3dagp5xglyacr4z4bwytkvkkwtn6enmuo5fi5iyd.onion
favicon LockBit - Leaked Yes 2026-05-06T23:49:30 NGINX nginx lockbit7z4cgxvictidwfxpuiov4scdw34nxotmbdjyxpkvkg34mykyd.onion
favicon LockBit - Leaked Yes 2026-05-06T23:57:33 NGINX nginx lockbit7z4k5zer5fbqi2vdq5sx2vuggatwyqvoodrkhubxftyrvncid.onion
favicon LockBit - Leaked Yes 2026-05-06T23:50:39 NGINX nginx lockbit7z4ndl6thsct34yd47jrzdkpnfg3acfvpacuccb45pnars2ad.onion
favicon LockBit - Leaked Yes 2026-05-06T23:51:44 NGINX nginx lockbit7z55tuwaflw2c7torcryobdvhkcgvivhflyndyvcrexafssad.onion
favicon LockBit - Leaked No 2026-04-28T07:44:39 lockbit7z57mkicfkuq44j6yrpu5finwvjllczkkp2uvdedsdonjztyd.onion
favicon LockBit - Leaked Yes 2026-05-06T23:41:43 NGINX nginx lockbit7z5ehshj6gzpetw5kso3onts6ty7wrnneya5u4aj3vzkeoaqd.onion
favicon LockBit - Leaked Yes 2026-05-06T23:52:52 NGINX nginx lockbit7z5hwf6ywfuzipoa42tjlmal3x5suuccngsamsgklww2xgyqd.onion
favicon LockBit - Leaked Yes 2026-05-06T23:43:57 NGINX nginx lockbit7z5ltrhzv46lsg447o3cx2637dloc3qt4ugd3gr2xdkkkeayd.onion
favicon LockBit - Leaked Yes 2026-05-06T23:53:59 NGINX nginx lockbit7z6choojah4ipvdpzzfzxxchjbecnmtn4povk6ifdvx2dpnid.onion
favicon LockBit - Leaked Yes 2026-05-06T23:55:04 NGINX nginx lockbit7z6dqziutocr43onmvpth32njp4abfocfauk2belljjpobxyd.onion
favicon LockBit - Leaked No 2026-04-28T07:51:19 lockbit7z6f3gu6rjvrysn5gjbsqj3hk3bvsg64ns6pjldqr2xhvhsyd.onion
favicon LockBit - Leaked Yes 2026-05-06T23:38:40 NGINX nginx lockbit7z6qinyhhmibvycu5kwmcvgrbpvtztkvvmdce5zwtucaeyrqd.onion
favicon LockBit - Leaked No 2026-05-06T23:56:13 lockbit7z6rzyojiye437jp744d4uwtff7aq7df7gh2jvwqtv525c4yd.onion
favicon LockBit File Share No 2026-04-28T07:53:57 lockbitfile2tcudkcqqt2ve6btssyvqwlizbpv5vz337lslmhff2uad.onion
favicon LockBit Private Note No 2026-04-28T07:54:17 lockbitnotexk2vnf2q2zwjefsl3hjsnk4u74vq4chxrqpjclfydk4ad.onion
YARA Rules (1)