Dark Web Profile: RansomHub - SOCRadar® Cyber Intelligence Inc.

RansomHub, a new ransomware group, has emerged in February 2024, claiming responsibility for 18 attacks and leaking data from 14 victims. The group, which operates as a Ransomware-as-a-Service (RaaS) model, prohibits attacks on specific countries and non-profit organizations. RansomHub’s tactics include exploiting the ZeroLogon vulnerability and using tools like Atera and Splashtop for remote access.