RansomHub (Growth) Active
RansomHub becoming dominant RaaS absorbing ALPHV/LockBit affiliates.1
Total Victims
2024-06-01
First Seen
2026-03-06
Last Seen
0
Known TTPs
4.4d
Avg Delay
0
Negotiations
ONION URLS
ransomxifxwc5eteopdobynonjctkxxvap77yqifu2emfbecgbqdw6qd.onion
ransomgxjnwmu5ceqwo2jrjssxpoicolmgismfpnslaixg3pgpe5qcad.onion
fpwwt67hm3mkt6hdavkfyqi42oo3vkaggvjj4kxdr2ivsbzyka5yr2qd.onion
TOOLS
PowerTool
Rclone
Mimikatz
ngrok
FILE EXTENSIONS
.encrypted
ACTIVITY TIMELINE
TOP SECTORS
TOP COUNTRIES
ACTIVITY HEATMAP
| Date | Victim Name | Country | Sector | Status |
|---|---|---|---|---|
| 2026-03-06 | Royal Partners | United Arab Emirates | Logistics | Published |
No TTPs data
No YARA rules
No IoCs
No ransom notes