{"schema":"aeternae-malware-metadata/v1","generated_at":"2026-10-08T08:37:29+00:00","total_matching":1,"page":1,"page_size":200,"records":[{"id":"1e4f769caca5b9ddcaa2c3e5706fab5a0ec68746ee025b55849d9598bb9d80af","kind":"reference","title":"LockBit","family":"LockBit","category":"Malware intelligence","summary":"Ransomware galaxy based on https://docs.google.com/spreadsheets/d/1TWS238xacAto-fLKh1n5uTsdijWdCEsGIM0Y0Hvmc5g/pubhtml | LockBit operators tend to be very indiscriminate and opportunistic in their targeting. Actors behind this attack will use a variety of methods to gain initial access, up to and including basic methods such as brute force. After gaining initial access the actor follows a fairly t","first_seen":1760463081,"last_seen":1760463081,"created_at":1791440321,"updated_at":1791440321,"source_count":1,"data":{"context":"2025/10/velociraptor-leveraged-in-ransomware-attacks.json","tags":["misp:galaxy-name=\"Ransomware\"","misp:galaxy-type=\"ransomware\"","misp-galaxy:ransomware=\"LockBit\""],"aliases":[],"references":["https://github.com/Cisco-Talos/IOCs/blob/main/2025/10/velociraptor-leveraged-in-ransomware-attacks.json"],"filenames":[],"features":[],"related_cves":[],"labels":["LockBit"]},"observations":[{"source_id":"talos_ioc","source_url":"https://github.com/Cisco-Talos/IOCs/blob/main/2025/10/velociraptor-leveraged-in-ransomware-attacks.json","source_label":"LockBit","evidence_class":"provider_reported","confidence":null,"observed_at":1760463081,"fetched_at":1791440321,"data":{"context":"2025/10/velociraptor-leveraged-in-ransomware-attacks.json","tags":["misp:galaxy-name=\"Ransomware\"","misp:galaxy-type=\"ransomware\"","misp-galaxy:ransomware=\"LockBit\""],"aliases":[],"references":["https://github.com/Cisco-Talos/IOCs/blob/main/2025/10/velociraptor-leveraged-in-ransomware-attacks.json"],"family":"LockBit"}}],"indicators":[]}]}