Home › Threat Actors › LockBit 4.0

Ransomware 🔴 ACTIVE 2026 Origin: Russia

LockBit 4.0

Active Ransomware group targeting Healthcare, Manufacturing, Legal and other sectors. Tracked by CYBERDUDEBIVASH SENTINEL APEX since 2024.

4Known TTPs

3CVEs Used

4Target Sectors

ACTIVEStatus 2026

⚔️ Known TTPs

▸Initial Access via CVE exploitation
▸Lateral movement via BloodHound/SharpHound
▸Data exfiltration before encryption
▸Double extortion + leak site

🎯 Target Sectors

🏢 Healthcare
🏢 Manufacturing
🏢 Legal
🏢 Government

🔓 CVEs Exploited

⚡ INTELLIGENCE AVAILABLE

LockBit 4.0 Detection Rules + IOC Pack

Sigma rules, YARA signatures, and full IOC database for detecting LockBit 4.0 activity in your environment.

🛡️ Get Detection Pack → 🏢 Enterprise Advisory → 📖 Read Full Intelligence Report →