INSIDE THE LOCKBIT'S ADMIN PANEL LEAK: AFFILIATES, VICTIMS AND MILLIONS IN CRYPTO

Summary from the TLDR InfoSec newsletter

On May 7, an anonymous hacker named "xoxo from Prague" breached LockBit's admin panel and leaked an SQL database containing operational data from December 2024 to April 2025. The leak revealed that LockBit earned approximately $2.3 million from ransom payments during this period, primarily targeting China and the manufacturing sector, while its registration fee claims were grossly inflated at only $10,000 to $11,000. Additionally, the leak disclosed details about 75 affiliates and their connections to other ransomware groups like RansomHUB, HellCat, and Evil Corp, with affiliates adjusting ransom demands to match company revenues and specific geographic targets.