Hive — Ransomware Profile
Hive ransomware primarily targeted healthcare organizations before the FBI secretly infiltrated the operation in 2022, providing victims with decryption keys.Also tracked as
Hive Ransomware
Tools & malware
- Cobalt Strike Post-exploitation framework
- Hive (encryptor) Ransomware
- Impacket Post-exploitation toolkit
- MEGA Exfiltration / cloud storage
- Metasploit Post-exploitation framework
- Mimikatz Credential dumper
- Rclone Exfiltration tool
- ScreenConnect Remote access (RMM)
- Splashtop Remote access (RMM)
Vendor research
- #StopRansomware: Hive Ransomware (AA22-321A) CISA / FBI / HHS
- Hive ransomware gets upgrades in Rust Microsoft
- Inside the Hive Group-IB
- Hive Ransomware Analysis Varonis
- New Hunters International ransomware possible rebrand of Hive BleepingComputer