Sponsor of the Day:
Jerkmate
https://thedfirreport.com/2025/06/30/hide-your-rdp-password-spray-leads-to-ransomhub-deployment/
Hide Your RDP: Password Spray Leads to RansomHub Deployment - The DFIR Report
Oct 30, 2025 - Key Takeaways Case Summary This intrusion began in November 2024 with a password spray attack targeting an internet-facing RDP server. Over the course of...
dfir reporthiderdppasswordspray
https://www.technadu.com/ransomhub-group-claims-data-breach-at-musicians-institute-1tb-allegedly-stolen/568063/
RansomHub Claims Musicians Institute Breach - TechNadu
The RansomHub ransomware gang claimed a 1TB “mi.edu” data breach and offered an alleged term for ransom payment.
musicians instituteransomhubclaimsbreachtechnadu
https://www.welivesecurity.com/en/videos/cosmicbeetle-joins-ranks-ransomhub-affiliates-week-security-tony-anscombe/
CosmicBeetle joins the ranks of RansomHub affiliates – Week in security with Tony Anscombe
ESET research also finds that CosmicBeetle attempts to exploit the notoriety of the LockBit ransomware gang to advance its own ends
tony anscombejoinsranksransomhubaffiliates
https://thehackernews.com/2024/09/ransomhub-ransomware-group-targets-210.html
RansomHub Ransomware Group Targets 210 Victims Across Critical Sectors
RansomHub ransomware group targets 210 victims across critical sectors. US government warns of rising attacks on infrastructure using advanced tactics
ransomware groupvictims acrossransomhubtargets210
https://www.lemagit.fr/actualites/366641713/De-LockBit-a-DragonForce-en-passant-par-RansomHub-sur-les-traces-dEvil-Corp
De LockBit à DragonForce en passant par RansomHub : sur les traces d’Evil Corp | LeMagIT
C’est un outil spécifique, utilisé à des fins de persistance après l’intrusion initiale, qui a trahi l’arrivée d’Evil Corp dans les rangs de DragonForce, après...
en passant parsur les tracesdelockbitdragonforce