CosmicBeetle joins the ranks of RansomHub affiliates – Week in security with Tony Anscombe

ESET researchers also find that CosmicBeetle attempts to exploit the notoriety of the LockBit ransomware gang to advance its own ends

Editor

13 Sep 2024

This week, ESET researchers published a deep dive into the recent activities of the CosmicBeetle cybercrime group. Among other notable things, CosmicBeetle was found to abuse the infamy of the LockBit ransomware gang for its own ends. Also, the analysis revealed that CosmicBeetle is likely to be a new affiliate of the ransomware-as-a-service actor RansomHub, as well as that it has compromised SMBs in various parts of the world with its new ScRansom ransomware. This ransomware, however, exhibits decryption issues to the point that it's actually impossible to restore some encrypted files.

How does CosmicBeetle attack its targets and what else is there to know about their recent campaigns? Learn more in the video and read the full write-up here: CosmicBeetle steps up: Probation period at RansomHub.