https://thehackernews.com/2025/04/ransomhub-went-dark-april-1-affiliates.html
RansomHub Went Dark April 1; Affiliates Fled to Qilin, DragonForce Claimed Control
RansomHub's sudden offline status triggered affiliate migration to Qilin and cartel shifts, signaling major RaaS disruption.
https://www.techtarget.com/searchsecurity/news/366617096/ESET-RansomHub-most-active-ransomware-group-in-H2-2024
ESET: RansomHub most active ransomware group in H2 2024 | TechTarget
ESET published its 'Threat Report H2 2024,' which said the RansomHub ransomware group will likely remain the most active into 2025.
most activeesetransomhubransomwaregroup
https://www.infosecurity-magazine.com/news/ransomhub-overtakes-lockbit/
RansomHub Overtakes LockBit as Most Prolific Ransomware Group - Infosecurity Magazine
Oct 17, 2024 - Symantec data reveals RansomHub claimed more attacks than any other group in Q3 2024
ransomhubovertakeslockbitprolificransomware
https://www.comparitech.com/news/ransomhub-claims-december-2024-ransomware-attacks-on-two-us-school-districts/
RansomHub claims December 2024 ransomware attacks on two US school districts - Comparitech
Feb 10, 2025 - Yesterday, RansomHub added two US school districts to its data leak site -- Highland Park Independent School District, Texas, and Wayne-Westland Community...
ransomware attacks
https://www.tenable.com/blog/cybersecurity-snapshot-ransomhub-group-triggers-cisa-warning-while-fbi-says-north-korean
RansomHub, North Korean crypto hackers, ICS/OT security & more!
north koreanot securityransomhubcryptohackers
https://www.techtarget.com/healthtechsecurity/news/366609974/RansomHub-claims-Planned-Parenthood-cyberattack
RansomHub claims Planned Parenthood cyberattack | TechTarget
Learn about the Planned Parenthood cyberattack carried out by RansomHub.
planned parenthoodransomhubclaimscyberattacktechtarget
https://thehackernews.com/2025/01/python-based-malware-powers-ransomhub.html
Python-Based Malware Powers RansomHub Ransomware to Exploit Network Flaws
Python backdoor delivers RansomHub ransomware after SocGholish exploits outdated WordPress SEO plugins. Impact: lateral movement via SOCKS5 proxy.
pythonbasedmalwarepowersransomhub
https://www.bitdefender.com/en-gb/blog/hotforsecurity/ransomhub-mexic-website
RansomHub Hits Mexican Government Website and Servers
Hackers have compromised the infrastructure of a Mexican governmental platform and deployed ransomware
government websiteransomhubhitsmexicanservers
https://cyberinsider.com/ransomhub-ransomware-deploys-new-edr-killing-tool-edrkillshifter/
RansomHub Ransomware Deploys New EDR-Killing Tool 'EDRKillShifter' | CyberInsider
Aug 15, 2024 - Sophos has identified a new malicious tool, dubbed "EDRKillShifter," employed by cybercriminals behind the RansomHub ransomware.
ransomhubransomwaredeploysnewedr
https://therecord.media/ransomhub-gang-behind-attack-mexican-airport-operator
RansomHub gang allegedly behind attack on Mexican airport operator | The Record from Recorded...
Grupo Aeroportuario del Centro Norte announced last Friday that a cyber incident forced its IT team to turn to backup systems in an effort to continue running...
https://cyberinsider.com/scattered-spider-partners-with-ransomhub-to-launch-ransomware-attacks/
Scattered Spider Partners with RansomHub in New Attack
Oct 25, 2024 - A RansomHub ransomware attack targeting a manufacturing company identified the threat group "Scattered Spider" as the perpetrator.
scattered spiderpartnersransomhubnewattack
https://www.welivesecurity.com/en/eset-research/cosmicbeetle-steps-up-probation-period-ransomhub/?ref=webrecord.media
CosmicBeetle steps up: Probation period at RansomHub
ESET researchers examine the recent activities of the CosmicBeetle threat actor, documentingt its new ScRansom ransomware and highlighting connections to other...
probation periodstepsransomhub
https://securityaffairs.com/167105/cyber-crime/ransomhub-tool-kill-edr-software.html
A group linked to RansomHub operation employs EDR-killing tool EDRKillShifter
Aug 15, 2024 - A cybercrime group linked to the RansomHub ransomware was spotted using a new tool designed to kill EDR software.
a grouplinked toransomhub
https://www.welivesecurity.com/de/eset-research/ransomhubs-edrkillshifter-ein-werkzeug-geht-auf-reisen/
EDRKiller von Ransomhub macht die Runde
ESET Forscher entdecken neue Verbindungen zwischen Mitgliedern von RansomHub und den rivalisierenden Gangs Medusa, BianLian und Play
vonransomhubmachtdierunde
https://thehackernews.com/2024/09/ransomhub-ransomware-group-targets-210.html
RansomHub Ransomware Group Targets 210 Victims Across Critical Sectors
RansomHub ransomware group targets 210 victims across critical sectors. US government warns of rising attacks on infrastructure using advanced tactics
group targetsransomhubransomwarevictimsacross
https://www.trendmicro.com/vinfo/mx/security/news/ransomware-spotlight/ransomware-spotlight-ransomhub
Ransomware Spotlight: Ransomhub| Trend Micro (MX)
Despite being a young ransomware group, RansomHub moves boldly by targeting larger enterprises more likely to pay ransoms. With possible links to notorious...
trend microransomwarespotlightransomhubmx