HomeCII/OTAffiliates of RansomHub connected to competing RaaS providers

Affiliates of RansomHub connected to competing RaaS providers

Published on

spot_img

ESET researchers have delved into the intricate web of the ransomware ecosystem in 2024, shedding light on the activities of RansomHub, a newly emerged yet highly active ransomware-as-a-service (RaaS) group. The recent report not only provides a comprehensive analysis of RansomHub’s operations but also reveals previously undisclosed information about its affiliate network. Moreover, the researchers have uncovered noteworthy connections between RansomHub and other prominent ransomware gangs like Play, Medusa, and BianLian.

One of the key findings of ESET’s research is the alarming rise of EDR killers, with EDRKillShifter being identified as a tool specifically designed by RansomHub to circumvent EDR security solutions. This development highlights the evolving tactics employed by ransomware affiliates to outsmart detection mechanisms and maximize their impact.

For a detailed breakdown of RansomHub’s modus operandi, the broader landscape of ransomware-as-a-service in 2024, and the nuances of EDR killers, viewers can gain valuable insights from ESET Chief Security Evangelist Tony Anscombe in the accompanying video presentation. Additionally, the complete blog post on WeLiveSecurity offers a more in-depth exploration of the research findings and their implications for cybersecurity professionals and businesses.

The emergence of RansomHub and the proliferation of tools like EDRKillShifter underscore the persistent and evolving threat posed by ransomware actors in the digital landscape. As organizations continue to grapple with the ever-increasing sophistication of such attacks, staying informed about the latest developments and adopting proactive security measures become imperative.

In light of these revelations, cybersecurity experts and industry stakeholders are urged to remain vigilant and update their defense strategies to mitigate the risk of falling victim to ransomware incidents. By understanding the evolving tactics and tools employed by threat actors, organizations can enhance their resilience and better protect their valuable assets from the pervasive menace of ransomware.

To stay abreast of the latest updates and insights from ESET researchers, individuals can connect with the team on social media platforms such as Facebook, X, LinkedIn, and Instagram. By fostering a collaborative and informed cybersecurity community, ESET aims to empower individuals and organizations to navigate the complex cybersecurity landscape and safeguard their digital assets effectively.

Source link

Latest articles

Anubis Ransomware Now Hitting Android and Windows Devices

 A sophisticated new ransomware threat has emerged from the cybercriminal underground, presenting a...

Real Enough to Fool You: The Evolution of Deepfakes

Not long ago, deepfakes were digital curiosities – convincing to some, glitchy to...

What Happened and Why It Matters

In June 2025, Albania once again found itself under a digital siege—this time,...

Why IT Leaders Must Rethink Backup in the Age of Ransomware

 With IT outages and disruptions escalating, IT teams are shifting their focus beyond...

More like this

Anubis Ransomware Now Hitting Android and Windows Devices

 A sophisticated new ransomware threat has emerged from the cybercriminal underground, presenting a...

Real Enough to Fool You: The Evolution of Deepfakes

Not long ago, deepfakes were digital curiosities – convincing to some, glitchy to...

What Happened and Why It Matters

In June 2025, Albania once again found itself under a digital siege—this time,...