Hive is a Ransomware-as-a-Service (RaaS) criminal group targeting healthcare and energy sectors globally.
Hive is a criminal ransomware group operating under the Ransomware-as-a-Service (RaaS) model. They primarily target healthcare providers, energy companies, charities, and retailers globally. Notably, in 2022 they upgraded their arsenal by switching from GoLang to Rust for their malware development. Defenders should focus on phishing awareness training, maintaining offline backups of critical data, and implementing network segmentation to limit lateral movement.
Hive is a strain of ransomware that was first discovered in June 2021. Hive was designed to be used by Ransomware-as-a-service providers, to enable novice cyber-criminals to launch ransomware attacks on healthcare providers, energy providers, charities, and retailers across the globe. In 2022 there was a switch from GoLang to Rust.
Hive switched from GoLang to Rust in 2022 to upgrade its tools.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.