ESET researchers also examine the growing threat posed by tools that ransomware affiliates deploy in an attempt to disrupt EDR security solutions

27 Mar 2025

ESET research has released a deep-dive analysis of changes in the ransomware ecosystem in 2024, focusing especially on RansomHub, a new but highly prolific ransomware-as-a-service (RaaS) gang. Among other things, the report features previously unpublished insights into RansomHub’s affiliate structure and uncovers connections between this gang and its peers, such as Play, Medusa, and BianLian.

In addition, ESET’s analysis also documents the emerging threat of EDR killers, unmasking EDRKillShifter, one such tool developed and maintained by RansomHub.

What else should you know about RansomHub, the ransomware-as-a-service landscape in 2024, and EDR killers? Learn from ESET Chief Security Evangelist Tony Anscombe in the video and make sure to read the full blogpost on WeLiveSecurity.

Connect with us on Facebook, X, LinkedIn and Instagram.