RansomHub: From Predator to Prey in the Ransomware Ecosystem

In February, RansomHub was described as the leading Ransomware-as-a-Service group and a persistent threat to critical sectors. A few weeks later, Trend Micro analyzed the SocGholish MaaS framework and its role in deploying the RansomHub ransomware. RansomHub was growing and having a significant impact within the ransomware ecosystem. However, in the blink of an eye, it seemed that RansomHub had become the victim of a takeover.