#StopRansomware: RansomHub Ransomware

The Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency, the Multi-State Information Sharing and Analysis Center, and the Department of Health and Human Services are releasing this joint advisory to disseminate known RansomHub ransomware IOCs and TTPs.

These have been identified through FBI threat response activities and third-party reporting as recently as August 2024. RansomHub is a ransomware-as-a-service variant, formerly known as Cyclops and Knight, that has established itself as an efficient and successful service model.