Campaigns / Malware / Family

Lockbit

3New IOCs · 24h

17New IOCs · 7 days

17Indicators tracked

1Independent feeds

2026-10-12 07:26Last activity

New indicators per day

2026-09-29 to 2026-10-12, by first report.

Hash14
IP3
Malware17

Where its infrastructure is hosted

🇲🇩 Moldova1
🇱🇻 Latvia1
🇩🇪 Germany1

Latest indicators

Filter the live feed →

First seen	Type	Indicator	Role	Where
2026-10-12 07:26	IP	195.201.225[.]248	Contacted by malware	—
2026-10-12 01:47	SHA256	f91acec03efb1cf84654b4a01863760791b03c72bceb9474835a947fa5d19ea1	Malware sample	—
2026-10-12 01:47	IP	5.181.156[.]221	Contacted by malware	—
2026-10-11 07:02	SHA256	277ea4c16a62a9350cb8f558876946d1861d85a5aaa6b2f01e073a94bb2b141b	Malware sample	—
2026-10-11 06:41	SHA256	44d6a24cc155e50f7c95bd6a043d8bc653e232349d46df844a7f89cdb437c1f2	Malware sample	—
2026-10-11 05:39	SHA256	020c3da78fb4aef99dcb02836aa2706e0c53b7261d6dd124dae7bec63bfa3de9	Malware sample	—
2026-10-09 14:42	SHA256	1e8f6fb57172cb62c427fadea2dffdafb6eed0a74d1f4960e690a1b367bc1bed	Malware sample	—
2026-10-09 14:42	SHA256	6ced9e727c4a65bccd446cfd6b6222f5261c5ac97a798ddb729a931492c654b7	Malware sample	—
2026-10-09 06:18	SHA256	dd3e3344e6fdc60459d09c0f34a2694c74ef2ed90bfd76c3b622102562d31980	Malware sample	—
2026-10-09 06:18	SHA256	e32085f8f3f5dafd9bb62e754995e7be8fb2fb0d313c4f7c6f42c4cfce8521c7	Malware sample	—
2026-10-09 03:17	SHA256	650dd114e4fb43973c42ce3352d0911641904d9b9c88b5fb99d26b28783d62c6	Malware sample	—
2026-10-09 03:02	SHA256	86d1fe7f113db934ab83f0f33c9b26a85a04feae34271b60c2e5efd649cd833d	Malware sample	—
2026-10-08 14:44	SHA256	54a77d6396c2f6e043108c0703c1d540041aa41d0e9aa50d109ca754dcd47320	Malware sample	—
2026-10-08 13:42	SHA256	853fc57c343b161a4f94a6807830e342d57db73eecd8f2c0346ef860c6edd24c	Malware sample	—
2026-10-08 12:01	SHA256	7b9e17219d79e0535177f413836088cf5fafb5854f3d2b18856a9834e0ef2084	Malware sample	—
2026-10-08 12:01	IP	77.73.134[.]68	Contacted by malware	—
2026-10-07 04:00	SHA256	9cb152c8b293447cd41ba8965ff3984b613381ffee1b5859395c41069f14bf1a	Malware sample	—

Defanged for safety. URL query strings removed.

New indicators per day

Where its infrastructure is hosted

Latest indicators

Security check