LockBit 5.0 Deploys AI-Powered Ransomware with Automated Network Mapping

Sunday, March 29, 2026 at 04:00 PM UTC·Source: FBI Flash Alert

Updated: Monday, March 30, 2026 at 12:00 PM UTC

Executive Summary

LockBit 5.0 features AI module for automated reconnaissance, high-value target identification, and optimized encryption timing.

Analysis

LockBit 5.0 includes "LockBrain" — an AI module that automates network recon, identifies critical systems and backups, and determines optimal encryption timing based on victim activity patterns. Generates customized ransom notes from victim financial data. Average demands exceed $5M.

Timeline

Discovered

Mar 22, 2026

Exploitation Detected

Mar 22, 2026

Published

Mar 29, 2026

Source Attribution

Originally published by FBI Flash Alert on Mar 29, 2026. Verified by: FBI, CISA.

Related Threats

CRITICALRansomware

Cisco fixes critical IMC auth bypass present in many products

Cisco has released patches for a critical vulnerability in its out-of-band management solution, present in many of its servers and appliances. The flaw allows unauthenticated remote attackers to gain admin access to the Cisco Integrated Management Controller (IMC), which gives administrators remote control over servers even when the main OS is shut down. The vulnerability, tracked as CVE-2026-2009

CVE-2026-20093

7h agoCSO Online

HIGHRansomware

Akira ransomware group can achieve initial access to data encryption in less than an hour

A new report from Halcyon finds that the group also puts more effort than usual into developing working decryptors, likely to incentivize businesses to pay up. The post Akira ransomware group can achieve initial access to data encryption in less than an hour appeared first on CyberScoop .

13h agoCyberScoop

CRITICALRansomware

vSphere and BRICKSTORM Malware: A Defender's Guide

<div class="block-paragraph_advanced"><p>Written by: Stuart Carrera</p> <hr/></div> <div class="block-paragraph_advanced"><h3><span style="vertical-align: baseline;">Introduction</span><strong style="vertical-align: baseline;"> </strong></h3> <p><span style="vertical-align: baseline;">Building on </span><a href="https://cloud.google.com/blog/topics/threat-intelligence/brickstorm-espionage-campaign

CVE-2026-22769

15h agoMandiant