lorenz
Activity analysis
HackerFeeds has tracked 78 victims claimed by lorenz since January 2020, most recently in December 2023 — ranking #82 of 332 groups (0.2% of all tracked ransomware victims). No new victims have been posted in the last 180 days; the most recent claim was in December 2023. Its most-targeted sector is Manufacturing (15 victims), followed by Business Services (10). The United States accounts for 2 victims (50% of those with a known location); 74 victims did not disclose a location.
Victims per year
- 20202
- 202119
- 202235
- 202322
Top sectors
- Manufacturing15
- Business Services10
- Consumer Services6
- Construction6
- Technology5
- Healthcare5
Top countries
Computed from victims claimed on the group's leak site as collected by HackerFeeds; claims are not independently verified. Monthly reports · Methodology
Group profile
Tesorion describes Lorenz as a ransomware with design and implementation flaws, leading to impossible decryption with tools provided by the attackers. A free decryptor for 2021 versions was made available via the NoMoreRansom initiative. A new version of the malware was discovered in March 2022, for which again was provided a free decryptor, while the ransomware operators are not able to provide tools to decrypt affected files.
Recent victims
No victims tracked yet.