Dark | Light
[GUEST ACCESS MODE: Data is scrambled or limited to provide examples. Make requests using your API key to unlock full data. Check https://lunarcrush.ai/auth for authentication information.]

![MarioNawfal Avatar](https://lunarcrush.com/gi/w:24/cr:twitter::1319287761048723458.png) Mario Nawfal [@MarioNawfal](/creator/twitter/MarioNawfal) on x 2.3M followers
Created: 2025-07-22 23:20:00 UTC

🚨🇺🇸 NEW GLOBAL GROUP RANSOMWARE GOES FULL MULTIPLATFORM MENACE

GLOBAL GROUP ransomware just dropped, and it doesn’t care what OS you’re running.

Windows? Linux? macOS? All fair game now.

It’s built in Golang, which means one sneaky little binary can hit every system like a Swiss Army knife for cybercriminals. 

Encrypted files get slapped with “.lockbitloch” and your recovery window? Basically a speedrun timer.

Researchers traced the code back to earlier strains like Mamona RIP and Black Lock -  confirming this is more remix than original drop.

And with crypto-grade ChaCha20-Poly1305 encryption and Tor-based extortion built right in, this isn’t script-kiddy territory. This is enterprise ransomware-as-a-service with affiliate perks.

Source: DigWatch

![](https://pbs.twimg.com/media/Gwe3dd1XoAAsNyr.jpg)

XXXXXX engagements

![Engagements Line Chart](https://lunarcrush.com/gi/w:600/p:tweet::1947798814934634926/c:line.svg)

**Related Topics**
[files](/topic/files)
[swiss](/topic/swiss)
[os](/topic/os)

[Post Link](https://x.com/MarioNawfal/status/1947798814934634926)

[GUEST ACCESS MODE: Data is scrambled or limited to provide examples. Make requests using your API key to unlock full data. Check https://lunarcrush.ai/auth for authentication information.]

MarioNawfal Avatar Mario Nawfal @MarioNawfal on x 2.3M followers Created: 2025-07-22 23:20:00 UTC

🚨🇺🇸 NEW GLOBAL GROUP RANSOMWARE GOES FULL MULTIPLATFORM MENACE

GLOBAL GROUP ransomware just dropped, and it doesn’t care what OS you’re running.

Windows? Linux? macOS? All fair game now.

It’s built in Golang, which means one sneaky little binary can hit every system like a Swiss Army knife for cybercriminals.

Encrypted files get slapped with “.lockbitloch” and your recovery window? Basically a speedrun timer.

Researchers traced the code back to earlier strains like Mamona RIP and Black Lock - confirming this is more remix than original drop.

And with crypto-grade ChaCha20-Poly1305 encryption and Tor-based extortion built right in, this isn’t script-kiddy territory. This is enterprise ransomware-as-a-service with affiliate perks.

Source: DigWatch

XXXXXX engagements

Engagements Line Chart

Related Topics files swiss os

Post Link

post/tweet::1947798814934634926
/post/tweet::1947798814934634926