Threat actor

LockBit

In 9 briefs, most recently 12 October 2025. RSS for this tag

Learn more: Malpedia ↗ ThreatFox ↗ MalwareBazaar ↗

Coverage in DanSec Daily

  1. SonicWall SSL VPN compromises across 100+ environments, Oracle EBS zero-day malware attacks, and FBI seizure of BreachForums domains tied to ShinyHunters.
  2. Oracle EBS zero-day exploited by CL0P, SonicWall cloud backup breach exposing firewall configs, and Discord ID photo leak of 70,000 users.
  3. Discord Zendesk breach affecting 5.5M users, Qilin's Asahi brewery leak, and a LockBit-Qilin-DragonForce ransomware cartel.
  4. The Fortra GoAnywhere zero-day (CVE-2025-10035), Volvo supply chain ransomware theft, and Flo Health's $56M settlement with Google.
  5. The Bouygues Telecom breach of 6.4 million customers, the Salesforce vishing campaign tied to ShinyHunters, and the CISA-mandated patch for Exchange …
  6. Akira ransomware exploiting SonicWall SSL VPN zero-days, the Pi-hole GiveWP breach, and Secret Blizzard AitM attacks on Moscow embassies.
  7. Hawaiian Airlines hit by Scattered Spider, 27%+ of UK firms report cyber incidents, and Salt Typhoon targets a Canadian telecom via Cisco flaws.
  8. Ascension healthcare breach affecting 430,000+ patients, Insight Partners breach widening, and LockBit affiliate panel leaked.
  9. LockBit's breach, PowerSchool extortion of school districts, and the actively exploited OttoKit WordPress flaw.