Cisco Talos published IOCs ↗
- Evidence class
- provider reported
- Source family label
- LockBit
- Source confidence
- Not reported
- Observed
- 2025-10-14 17:31 UTC
- Retrieved
- 2026-10-08 06:18 UTC
LockBit
Ransomware galaxy based on https://docs.google.com/spreadsheets/d/1TWS238xacAto-fLKh1n5uTsdijWdCEsGIM0Y0Hvmc5g/pubhtml | LockBit operators tend to be very indiscriminate and opportunistic in their targeting. Actors behind this attack will use a variety of methods to gain initial access, up to and including basic methods such as brute force. After gaining initial access the actor follows a fairly t
Reference details
- Primary displayed family label
- LockBit
- Source context
2025/10/velociraptor-leveraged-in-ransomware-attacks.json- First reported
- 2025-10-14 17:31 UTC
- Last reported
- 2025-10-14 17:31 UTC
- Catalog updated
- 2026-10-08 06:18 UTC
Source family labels
Tags
Published indicators
Network addresses are displayed in defanged form.
No file hashes or network indicators were published in this record.