Lilith is a C/C++-based double-extortion ransomware that emerged in July 2022, targeting 64-bit Windows systems and sharing code with the Babuk ransomware family, with its first confirmed victim being a large South American construction firm.
The Lilith ransomware group emerged in July 2022 and primarily targets 64-bit Windows systems.
Key TTPs include file encryption accompanied by data theft for double-extortion and the use of encryptor tools sharing code similarities with the Babuk ransomware family.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.