Tekinox Srl

Tekinox Srl, also known as Tekinox, is an Italian manufacturing firm.
The company's headquarters is located in Italy.

On August 2, 2022, Tekinox Srl experienced a ransomware attack.
The attack was conducted by the LockBit 3.0 ransomware group.
LockBit 3.0 exfiltrated the company's data during the incident.
The attackers initiated a countdown threatening to release the stolen data publicly unless a ransom was paid.
LockBit published samples of the stolen information on their leak site to confirm the breach.
The publication also served as a threat of full disclosure if demands were not met.

The attackers employed double extortion tactics as part of their strategy.
Double extortion involves encrypting data while simultaneously threatening to leak sensitive materials.
LockBit operates under a ransomware-as-a-service (RaaS) business model.
In this model, profits generated from ransom payments are shared between the core developers and affiliated operators.
Victims of LockBit are given the option to extend the payment deadline for an additional fee. Alternatively, victims may choose to have the destroyed data option executed.
Another option allows victims to download the exfiltrated information upon making an extra payment.

The incident underscores LockBit's evolving capabilities in ransomware operations.
One notable advancement is the ransomware's ability to self‑propagate across compromised networks.
LockBit also monetizes its attacks primarily through cryptocurrency payments.
These tactics reflect the group's ongoing adaptation to maximize pressure and revenue from victims.