Hive (ELF)
- First seen
- 2021-06-25 00:00:00
- Malware type
- ransomware
- Family
- Malware family
- Profile updated
- 2026-07-07 13:02:50
Targeted industries: government-and-public-sector healthcare-and-pharmaceutical financial-services
Targeted regions: country_code:us country_code:de country_code:fr
Context
Hive ransomware is a prominent threat known for its sophisticated data encryption techniques and double-extortion tactics, targeting various industries worldwide. Initially discovered in 2021, it has been linked to attacks demanding cryptocurrency payments to decrypt data and prevent data leaks.
Reports & references
- Microsoft — Ransomware As A Service Understanding The Cybercrime Gig Economy And How To Protect Yourself (report)
- blogs.vmware.com — Esxi Targeting Ransomware The Threats That Are After Your Virtual Machines Part 1 (report)
- Microsoft — Re54L7V (report)
- media.kasperskycontenthub.com — Common Ttps Of The Modern Ransomware Low Res (report)
- bleepingcomputer.com — The Week In Ransomware April 1St 2022 I Can Fight With A Keyboard (report)
- threatstop.com — First Conti Then Hive Costa Rica Gets Hit With Ransomware Again (report)
- bleepingcomputer.com — Hive Ransomware Ports Its Linux Vmware Esxi Encryptor To Rust (report)
- Trend Micro — Ransomware Spotlight Hive (report)
- yoroi.company — Yoroi On The Footsteps Of Hive Ransomware (report)
- arxiv.org — 2202.08477 (report)
- blog.group-ib.com — Hive (report)
- github.com — Hive (report)
- lifars.com — How To Decrypt The Files Encrypted By The Hive Ransomware (report)
- securityaffairs.co — Recover Files Hive Ransomware (report)
- thehackernews.com — Master Key For Hive Ransomware (report)
- therecord.media — Academics Publish Method For Recovering Data Encrypted By The Hive Ransomware (report)
- therecord.media — Hive Ransomware Shuts Down California Health Care Organization (report)
- twitter.com — 1454100591261667329 (report)
- twitter.com — 1455628865229950979 (report)
- yoroi.company — On The Footsteps Of Hive Ransomware (report)
- krebsonsecurity.com — Russian Hacker Wazawaka Indicted For Ransomware (report)
- malpedia.caad.fkie.fraunhofer.de — Elf.Hive (report)
- github.com — Hivev5 File Decryptor (report)