LockBit ransomware, active since 2021, targets critical infrastructure supply chains using RaaS and StealBit for data theft and extortion. LockBit 5.0 evades detection across Win/Linux/ESXi. US offers $15M bounty. Mitigate with segmentation, MFA, and Dragos tools.