Hive Ransomware as a Service A website used by gangs to extort ransoms and exfiltrate stolen data from corporate victims has been seized in a joint operation involving police around the world.

Europol, the US Department of Justice, the FBI, the Secret Service, Europol, and law enforcement agencies, including Germany’s BKA and Polizei, are believed to have worked together to bring down the Hive gang. Extorted ransoms from over 1300 companies worldwidehas amassed an estimated $100 million in the last 18 months.

Hive was a particularly notorious ransomware group. The reason is that, unlike some of its rivals, it seemed to have no hesitation in targeting medical institutions.

e-mailsign up for newsletter
Security news, advice and tips.

But today, when you step onto the dark web and visit Hive’s leaked website, you’ll see this…

hive confiscated

This hidden site has been seized

The Federal Bureau of Investigation seized the site as part of a coordinated law enforcement action taken against the Hive ransomware.

The action was carried out with substantial support from Europol in collaboration with the Central District of Florida U.S. Attorney’s Office and the Department of Justice’s Computer Crime and Intellectual Property Division.

Animated GIF magic turns the message into Russian every few seconds (presumably trying to send a powerful message to the ransomware gang).

U.S. Department of Justice Press release announced that the FBI had compromised Hive’s infrastructure in late July 2022, obtaining decryption keys and providing them to victims around the world without having to pay a ransom.

Overall, the FBI says it has provided over 300 decryption keys to Hive victims since July 2022. Additionally, he has provided over 1,000 decryption keys to her past Hive victims.

The FBI says it continues to investigate the operation of Hive ransomware-as-a-service. Whether this will ultimately lead to the identification and prosecution of those involved in the intimidation ring remains to be seen…

Did you find this article interesting? Follow Graham Cluley on Twitter Also Mastodon To read more about the exclusive content we post.


Graham Cluley is a veteran of the antivirus industry and has worked for many security companies since the early 1990s when he created the first version of Dr. Solomon’s Antivirus Toolkit for Windows. He is now an independent security he is an analyst, makes regular media appearances and gives international lectures on computer he security, hackers and online he privacy. Follow him on Twitter. @gcluleyfor Mastodon @[email protected]or drop him an email.

cropped-BTA_Logo-B-1-scaled-1
YOUR FUTURE STARTS HERE.

BLUE TRAINING ACADEMY

Register now for our membership to gain access to our elite training program and fast forward your career today!

Newsletter

Subscribe my Newsletter for new blog posts, tips & new photos. Let's stay updated!

cropped-BTA_Logo-B-1-scaled-1
Security Blog

Blue Training Academy

Blue Training Academy was developed in 2018 as a educational and training facility for continuing education and certification courses. Blue Training Academy is an educational institution that allows for all sectors of the public and Criminal Justice field to gain ongoing training and education.

Copyright ©️ All rights reserved. | Blue Training Academy Blog