Motivation: Financial
One of the most prolific ransomware-as-a-service ecosystems from 2019 onward, whose leaked builder and brand kept shaping newer families and affiliates even after law-enforcement disruption. Several newer groups run LockBit 3.0-derived tooling.
Role: ransomware ecosystem anchor. Targeting: global, multi-sector enterprise victims.
Attribution draws on public threat-intelligence reporting · Established (multi-source). Primary source →
Check your exposure privately, or request a tailored exposure audit.