ESET researchers have delved into the increasing threat posed by tools utilized by ransomware affiliates in an effort to disrupt EDR security solutions
27 Mar 2025
ESET research has published an in-depth analysis of the changes in the ransomware ecosystem in 2024, with a specific focus on RansomHub, a newly emerged but highly active ransomware-as-a-service (RaaS) group. The report uncovers previously undisclosed details about RansomHub’s affiliate network and reveals connections between this group and other ransomware gangs like Play, Medusa, and BianLian.
Moreover, ESET’s analysis highlights the emerging threat of EDR killers, shedding light on EDRKillShifter, a tool developed and maintained by RansomHub.
Curious to learn more about RansomHub, the ransomware-as-a-service landscape in 2024, and EDR killers? Watch ESET Chief Security Evangelist Tony Anscombe discuss in the video below and be sure to read the complete blog post on WeLiveSecurity.
Connect with us on Facebook, X, LinkedIn and Instagram.
