![]() |
Description: Cybersecurity researchers have revealed that RansomHub's online infrastructure has "inexplicably" gone offline as of April 1, 2025, prompting concerns among affiliates of the ransomware-as-a-service (RaaS) operation.
Singaporean cybersecurity company Group-IB said that this may have caused affiliates to migrate to Qilin, given that "disclosures on its DLS [data leak site] have doubled since
April 30th, 2025 (about 1 month ago)
|
![]() |
Description: A new analysis has uncovered connections between affiliates of RansomHub and other ransomware groups like Medusa, BianLian, and Play.
The connection stems from the use of a custom tool that's designed to disable endpoint detection and response (EDR) software on compromised hosts, according to ESET. The EDR killing tool, dubbed EDRKillShifter, was first documented as used by RansomHub actors in
March 27th, 2025 (2 months ago)
|
![]() |
Description: D&S Electrical Contractors Inc Falls Victim to RansomHub Ransomware
March 26th, 2025 (2 months ago)
|
![]() |
Description: Security researchers have linked a new backdoor dubbed Betruger, deployed in several recent ransomware attacks, to an affiliate of the RansomHub operation. [...]
March 20th, 2025 (2 months ago)
|
![]() |
Description: A ransomware activity wave using the SocGholish MaaS framework for initial access also has affected banking and consulting firms in the US, Taiwan, and Japan since the beginning of the year.
March 17th, 2025 (2 months ago)
|
![]() |
Description: PT Catur Sentosa Adiprana Tbk Falls Victim to RansomHub Ransomware; 112 GB Data at Risk
March 10th, 2025 (3 months ago)
|
![]() |
Description: Dcaro Solutions Allegedly Targeted by Ransomhub Ransomware Group
March 9th, 2025 (3 months ago)
|
![]() |
Description: JPW Industries Allegedly Targeted by Ransomhub Ransomware Group
March 8th, 2025 (3 months ago)
|
![]() |
Description: Portland Public Schools, Maine Targeted by RansomHub Ransomware Group
March 6th, 2025 (3 months ago)
|
![]() |
Description: Riverdale Country School Has Fallen Victim to RansomHub Ransomware
February 20th, 2025 (3 months ago)
|