Shifting the sands of RansomHub’s EDRKillShifter
ID: 23805cc0-b13f-59c5-a2fe-35052249e8f3
STIX ID: report--23805cc0-b13f-59c5-a2fe-35052249e8f3
Feed Name: WeLiveSecurity (ESET Research)
Threat Score
**Executive summary:** ESET documents the rapid rise of RansomHub in 2024 as a dominant RaaS gang, details its affiliate recruitment and tooling (notably the EDR killer EDRKillShifter), demonstrates operational linkages between RansomHub affiliates and established gangs Play, Medusa, and BianLian, and provides technical indicators (hashes, filenames, IPs) and MITRE ATT&CK mappings to support detection and mitigation.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.