lockbit2

LockBit 2.0 (also known as LockBit Red) was the second major version of the LockBit ransomware-as-a-service platform, active from mid-2021 until it was superseded by LockBit 3.0 in 2022. It introduced a built-in data exfiltration tool called StealBit and a highly automated affiliate panel, making it one of the most widely adopted RaaS platforms of its era. The group is assessed as Russia-linked and evolved into LockBit 3.0 (BlackCat-influenced encryptor) in mid-2022.