RansomHub Linked to Play, Medusa, and BianLian Ransomware Groups via Shared EDRKillShifter Use Security researchers discovered several ransomware gangs use RansomHub’s custom-developed EDRKillShifter, possibly even collaborating.

Play, Medusa, and BianLian use the EDRKillShifter, a tool by the RansomHub affiliate that prevents the monitoring of systems.

#RansomHub #BianLian #Medusa #Play #Hackers #EDRKillShifter

#ESETresearch discovered previously unknown links between the #RansomHub, #Medusa, #BianLian, and #Play ransomware gangs, and leveraged #EDRKillShifter to learn more about RansomHub’s affiliates. @SCrow357 www.welivesecurity.com/en/eset-rese... 1/7

Ransomware gang deploys new malware to kill security software RansomHub ransomware operators have been spotted deploying new malware to disable Endpoint Detection and Response (EDR) security software in Bring Your Own Vulnerable Driver (BYOVD) attacks

RansomHub ransomware operators have been spotted deploying new #EDRKillShifter malware to disable endpoint detection and response (EDR) security software in Bring Your Own Vulnerable Driver (BYOVD) attacks - #ransomeware #cyberattacks www.bleepingcomputer.com/news/securit...