LockBit 2.0 is the second major iteration of the LockBit RaaS platform, launched in mid-2021, introducing automated domain-wide encryption via Active Directory Group Policy and claiming the fastest encryption speed among ransomware families, accounting for 46% of ransomware breach events in early 2022.
Multi-threaded encryption using AES+RSA
Deletes shadow copies and disables recovery mode
Stops security, database, and backup services
Self-spreading via SMB
Establishes persistence via registry
Disables Windows Defender and EDR