LockBit 5.0 Strikes Windows Linux ESXi Proxmox

LockBit 5.0 strikes Windows, Linux, and ESXi systems with a formidable presence, marking a significant evolution in ransomware threats. Released in September 2025, it further establishes LockBit as a dominant force in cyber threats. By targeting multiple operating systems, this version supports a ransomware-as-a-service model that continues to disrupt businesses globally. Notably, the malware focuses on the U.S. market, predominantly affecting private companies, alongside sectors like manufacturing, healthcare, and education.

Acronis analysts highlight the enhanced defense mechanisms in LockBit 5.0. The Windows version, in particular, uses sophisticated techniques to evade detection, such as obfuscation and process hollowing. Its encryption prowess is also notable, using advanced algorithms to secure files quickly. The ransomware’s design ensures rapid impact, encrypting data swiftly across platforms.

Businesses must remain vigilant, employing layered security measures to counteract these advanced threats. Discover more about this growing threat at the detailed report.

LockBit’s New 5.0 Version Attacking Windows, Linux and ESXi Systems