Hive (Vault 8)

First seen
2021-06-01 00:00:00
Malware type
ransomware
Family
Malware family
Profile updated
2026-07-07 14:30:52

Targeted industries: healthcare-and-pharmaceutical financial-services government-and-public-sector

Context

Hive is a ransomware-as-a-service operation known for targeting organizations in critical industries, engaging in double extortion tactics by exfiltrating data before encryption.

Reports & references

  • malpedia.caad.fkie.fraunhofer.de — Elf.Vault8 Hive (report)
  • wikileaks.org — Vault8 (report)
  • github.com — Hive (report)

External references