Ransomware Group intelligence
Lockbit2
InactiveTrack Lockbit2 with 1005 published victims and 5 known leak locations in a single intelligence view.
Overview
Lockbit2 is tracked by Breach House as a ransomware group with 1005 published victims.
Italy is currently the most targeted country in this dataset.
5 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (5)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | zqaflhty5hyziovsxgqvj2mrz5e5rs6oqxzb54zolccfnvtn5w2johad.onion |
| Leak location 2 | Onion service | Unknown | yq43odyrmzqvyezdindg2tokgogf3pn6bcdtvgczpz5a74tdxjbtk2yd.onion |
| Leak location 3 | Onion service | Unknown | oyarbnujct53bizjguvolxou3rmuda2vr72osyexngbdkhqebwrzsnad.onion |
| Leak location 4 | Onion service | Unknown | lockbitaptstzf3er2lz6ku3xuifafq2yh5lmiqj5ncur6rtlmkteiqd.onion |
| Leak location 5 | Onion service | Unknown | lockbitaptq7ephv2oigdncfhtwhpqgwmqojnxqdyhprxxfpcllqdxad.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (1005)
Search, filter and paginate the victim timeline for Lockbit2. Showing 701–800 of 1005.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | eberlesrl.com id1819 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Royale.co.uk id1816 View details | United Kingdom | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | chatrium.com id1815 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | nurihiko.co.jp id1812 View details | Japan | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | eban.com id1811 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | cilentospa.it id1809 View details | Italy | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | autolaundrysyst... id1807 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | besttaxfiler.co... id1797 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | rttax.com id1796 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | interfor.com id1795 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | mcmanislaw.com id1794 View details | Finance / Legal / Insurance | — | ||
|
No additional victim description available. |
|||||
| Ransomware | owenscarolina.c... id1793 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | trueblueenviron... id1792 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | mym.com.pe id1791 View details | Peru | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | optimumdesign.c... id1790 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | arrowheadadvanc... id1789 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | fandi.fr id1788 View details | France | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | logistia.com id1787 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | cepimanagement.... id1786 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | waveridernurser... id1785 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | waclighting.com id1784 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | plumascounty.us id1783 View details | United States | Public Sector | — | |
|
No additional victim description available. |
|||||
| Ransomware | groweeisen.com id1774 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | tornel.com.mx id1770 View details | Mexico | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | gvalue.com id1766 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | wpdn.net id1765 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | dtstechnical.ca id1764 View details | Canada | IT | — | |
|
No additional victim description available. |
|||||
| Ransomware | immodelaet.be id1762 View details | Belgium | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | bdtaid.com id1761 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | morganskenderia... id1760 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | https://gvalue.... id1759 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | comune.gonzaga.... id1758 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | promo.parker.co... id1757 View details | Communication / Marketing | — | ||
|
No additional victim description available. |
|||||
| Ransomware | www.radium.com.... id1756 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | logcabinhomes.c... id1752 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | logi-cv.com id1750 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | rijeka-airport.... id1742 View details | Transportation / Travel | — | ||
|
No additional victim description available. |
|||||
| Ransomware | amina-treuhand.... id1741 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | psomagen.com id1740 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | parkhotel.mk id1739 View details | Hospitality / Food & Beverage / Tourism | — | ||
|
No additional victim description available. |
|||||
| Ransomware | roadrebel.com id1738 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | katzmanproduce.... id1737 View details | Communication / Marketing | — | ||
|
No additional victim description available. |
|||||
| Ransomware | pandol.com id1735 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | www.parkhotel.m... id1734 View details | Hospitality / Food & Beverage / Tourism | — | ||
|
No additional victim description available. |
|||||
| Ransomware | stehimpuls.de id1733 View details | Germany | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | www.psomagen.co... id1732 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | movingstation.c... id1731 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | http://www.movi... id1730 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | tedia.com id1729 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | lawyersforemplo... id1728 View details | Finance / Legal / Insurance | — | ||
|
No additional victim description available. |
|||||
| Ransomware | ville-saintaffr... id1727 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | le-inc.com id1725 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | idline.fr id1722 View details | France | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | dunndev.com id1721 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | https://ville-s... id1720 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | laserexcel.com id1719 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | mediacrush.co.i... id1718 View details | Communication / Marketing | — | ||
|
No additional victim description available. |
|||||
| Ransomware | cti.group id1717 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | delete id1716 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | https://www.cti... id1710 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | https://www.med... id1705 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | galaxybuilders.... id1703 View details | Construction / Real Estate | — | ||
|
No additional victim description available. |
|||||
| Ransomware | rockportmusic.o... id1702 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | madejwrobel.pl id1693 View details | Poland | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | datastorageip.c... id1676 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | srstlaw.com id1675 View details | Finance / Legal / Insurance | — | ||
|
No additional victim description available. |
|||||
| Ransomware | wnj.com id1674 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | selinigroup.it id1672 View details | Italy | Services | — | |
|
No additional victim description available. |
|||||
| Ransomware | www.datastorage... id1671 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | urbis.com.hk id1669 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | continentalcoun... id1668 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | meritresources.... id1667 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | groeflinag.ch id1666 View details | Switzerland | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | radium.com.tw id1665 View details | Taiwan, Province of China | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | bataviacontaine... id1664 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | https://www.pea... id1663 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | https://www.mer... id1662 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | https://www.gro... id1661 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | www.continental... id1660 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | thefoxhillclub.... id1659 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | zgoda.net id1656 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | atento.com id1638 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | ferrolabella.co... id1629 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | cassini-technol... id1628 View details | IT | — | ||
|
No additional victim description available. |
|||||
| Ransomware | espera.com id1625 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | valleyregionalt... id1623 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | uslogic.com id1622 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | sb-kc.com id1620 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | wmlaw.com.au id1619 View details | Australia | Finance / Legal / Insurance | — | |
|
No additional victim description available. |
|||||
| Ransomware | uvisionuav.com id1618 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | wataniaind.com id1617 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | alwatania.sa id1616 View details | Saudi Arabia | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | wolfbergalvarez... id1612 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | hitrac-engineer... id1611 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | planitox.com.br id1609 View details | Brazil | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | cera id1607 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | riversidetwp.or... id1606 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | nofeurope.com id1601 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | hybuilding.com.... id1600 View details | Construction / Real Estate | — | ||
|
No additional victim description available. |
|||||
| Ransomware | ceoempowers.org id1599 View details | Energy | — | ||
|
No additional victim description available. |
|||||