Understanding Illicit Ecosystems: Inside Rehub’s Rise as a Primary Ransomware Marketplace

Rehub is a Russian-language cybercrime forum launched in August 2025 that has evolved into a major ransomware-focused marketplace, absorbing users from seized forums and hosting prominent RaaS groups (e.g., DragonForce, LockBit). The report details the forum’s user base, commerce model (including paid premium tiers), forum sections (Marketplace, Library, Technical, Arbitration), and its positioning as a high-barrier platform facilitating ransomware operations, stolen data, malware services, and related illicit infrastructure.