Lockbit - is the cybercrime group, which used Lockbit ransomware for attacks. Lockbit ransomware was discovered in December 2019. In January 2020, the victims were from the USA, Germany, France, China.

LockBIt is a Ransomware advertised by seller under names LockBit and LockBIt on Russian forums since January 2020. LockBit uses RSA and AES algorithms for encryption. Ransomware has the following capabilities: volume shadow copies and system backup deleting, UAC bypassing and SMB propagation using stolen account with high privileges.
From 17th of July intruders started using Lockbit2.0 ransomware.
And from 6th of June intruders started using Lockbit3.0 ransomware
At the time of 29 August 2022 Lockbit Ransomware had 1071 victims from different countries.
In October 2021 LockBit ransomware added support for Linux systems. Experts have spotted a new version that targets VMware ESXi virtual machines, which is aimed at expanding the group of potential targets to include organizations that are migrating to virtualization environments. LockBit operations have been advertising a new Linux version that targets VMware ESXi virtual machines since October 2021. An announcement for LockBit Linux-ESXi Locker version 1.0 has been advertised in the underground forum “RAMP” since October. Security researchers analyzed the LockBit Linux-ESXi Locker version 1.0, which uses a combination of Advanced Encryption Standard (AES) and Elliptic-Curve Cryptography (ECC) algorithms for data encryption. This version is able to gather information such as processor information, volumes in the system, virtual machines to skip, total files, total virtual machines, encrypted files, encrypted virtual machines, total encrypted size, and time spent for encryption. It also supports commands that allow it to determine the type of virtual machines registered on the target system and power off them to unlock and encrypt their resources.