RansomHub (8271849f-77f9-5a38-812e-7b6a348b01c4)
RansomHub is a ransomware-as-a-service (RaaS) offering with Windows, ESXi, Linux, and FreeBSD versions that has been in use since at least 2024 to target organizations in multiple sectors globally. RansomHub operators may have purchased and rebranded resources from Knight (formerly Cyclops) Ransomware which shares infrastructure, feature, and code overlaps with RansomHub.[CISA RansomHub AUG 2024][Group-IB RansomHub FEB 2025]