LockBit 5.0
LockBit 5.0 ("ChuongDong") emerged in September 2025 as the group's resurgence following the February 2024 law enforcement takedown, introducing cross-platform payloads targeting Windows, Linux, and VMware ESXi with enhanced evasion capabilities and continuing the RaaS affiliate model of its predecessors.
Threat Level
HIGH
Get an alert if one of your domains is named on a ransomware leak site. Monitor your domains Free account · up to 5 monitored targets
Known Infrastructure
The following Tor hidden services have been associated with this group:
LockBit - LeakedLockBit 5.0 BlogLockBit lite chatLockBit 5.0 lite control panelLockBit - Leaked
Warning: These are malicious sites. Do not visit without proper security measures.
Check If You’re Affected
Search our database to see if your organization appears in LockBit 5.0’s victim list.
risk score · threat categories · sources · age · confidence — in one request