Hive emerged in June 2021 as a Ransomware-as-a-Service (RaaS) operation, rapidly gaining prominence for its aggressive tactics and high-profile attacks, particularly targeting healthcare and public health (HPH) entities. The group is assessed with moderate confidence to be of Russian or Eastern European origin, with some members having previously been associated with the Conti ransomware group. Its primary motivation is financial gain through a double extortion model. What sets Hive apart is its rapid evolution, including a shift in 2022 from GoLang to Rust programming for its ransomware, and its ultimate disruption in January 2023 by an unprecedented FBI infiltration operation that successfully provided decryption keys to victims, averting significant ransom payments.

Sectores atacados

URLs nuevas detectadas en IntelTracker