LockBit 4.0 Ransomware: A New Threat Emerges in 2025
LockBit, one of the most notorious ransomware families, has unveiled its latest iteration—LockBit 4.0. This development marks a significant evolution in the ransomware landscape, with advanced features designed to expand its reach and intensify its impact.
Our team recently identified a victim of the newly released LockBit 4.0 ransomware. The ransomware employs an advanced hybrid encryption mechanism, combining AES and RSA algorithms, and uses randomly generated 8- to 9-digit extensions to encrypt victim data.
LockBit 4.0 builds upon its predecessor, LockBit 3.0, and is reportedly a direct result of the CRONOS attack on LockBit’s infrastructure. With this latest version, the group has expanded its global reach, targeting organizations across industries and geographies.
A Call to Cybercriminals
The group has also escalated its efforts to recruit affiliates, actively promoting its program to encourage widespread distribution. A provocative excerpt from the ransom note reads:
“Want a Lamborghini, a Ferrari, and lots of titty girls? Sign up and start your pentester billionaire journey in 5 minutes with us.”
This section of the ransom note not only introduces LockBit 4.0 but also highlights its aggressive recruitment strategy, calling for penetration testers and hackers to join the affiliate program.
What’s Next?
A screenshot of the ransom note, which includes the extension name and LockBit 4.0 branding, provides further evidence of the group’s organized and professional approach to cybercrime.
Stay tuned to LockBitDecryptor.com for exclusive updates and insights into LockBit 4.0 and strategies to mitigate its impact.
