RansomHub, a ransomware-as-a-service provider, faced significant disruption as affiliates lost access to negotiation chat portals, leading to confusion and threats to ransom payments. The incident prompted affiliates to use other platforms, sometimes belonging to competitors. RansomHub, known for favorable payment terms and reducing 'exit-scamming' risk, suffered from internal turmoil, evidenced by widespread infrastructure disruptions. The interruption not only destabilized RansomHub but also caused uncertainty for victims engaged in ransom negotiations, as the reliability of communication channels was compromised and the delivery of decryption tools became doubtful.
Source: https://cybersecuritynews.com/ransomhub-ransomware-as-a-service-facing-internal-conflict/
TPRM report: https://scoringcyber.rankiteo.com/company/sec-consult-thailand-co-ltd
"id": "sec419041325",
"linkid": "sec-consult-thailand-co-ltd",
"type": "Ransomware",
"date": "4/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"