logo

How cops taking down LockBit, ALPHV led to RansomHub's meteoric rise

ID: 967dc640-9a13-5330-8076-50877bbeb08f

STIX ID: report--967dc640-9a13-5330-8076-50877bbeb08f

Feed Name: The Register (Security)

Threat Score
85/100

Date Published: 2024-12-28

Date Updated: 2026-04-26

Author: Jessica Lyons

...
...

RansomHub is a Russia-linked ransomware collective that emerged in early 2024, quickly recruiting affiliates from defunct groups and using repurposed Knight code and double-extortion tactics to compromise and extort hundreds of organizations; the group claimed 210 victims within six months and accounted for a growing share of ransomware incidents, drawing attention from FBI, CISA, and security firms while posing a significant ongoing threat due to its affiliate-friendly revenue model and aggressive leak-site publishing.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.