LockBit 2.0 is a RaaS platform known for high-speed encryption via Group Policy targeting critical infrastructure.
LockBit 2.0 is the second major version of the LockBit Ransomware-as-a-Service (RaaS) platform, launched in mid-2021. It targets organizations across various sectors, with a focus on critical infrastructure and financial entities. The key TTP is automated domain-wide encryption via Active Directory Group Policy, claiming the fastest encryption speed among ransomware families. Defenders should prioritize monitoring Active Directory environments and scrutinizing unauthorized Group Policy modifications.
LockBit 2.0 is the second major iteration of the LockBit RaaS platform, launched in mid-2021, introducing automated domain-wide encryption via Active Directory Group Policy and claiming the fastest encryption speed among ransomware families, accounting for 46% of ransomware breach events in early 2022.
LockBit 2.0 performs automated domain-wide encryption via Active Directory Group Policy.
Defenders should prioritize monitoring Active Directory environments and scrutinizing unauthorized Group Policy modifications.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.