RansomHub affiliates linked to rival RaaS gangs
ID: 00424238-713a-5cf6-8c9b-6e181efc6c8c
STIX ID: report--00424238-713a-5cf6-8c9b-6e181efc6c8c
Feed Name: WeLiveSecurity (ESET Research)
Threat Score
ESET’s March 2025 analysis examines shifts in the 2024 ransomware landscape centered on RansomHub, a prolific RaaS group, revealing affiliate relationships with other gangs (Play, Medusa, BianLian) and documenting the rise of "EDR killers" such as EDRKillShifter — tools developed to disable or disrupt EDR products and aid ransomware operations; the report is a high-level research briefing with links to a full technical blogpost and video.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.