Forescout details RansomHub group emerges as latest cyber threat post-Change Healthcare attack

A threat group called ‘RansomHub’ has emerged after the Change Healthcare ransomware attack, recruiting disgruntled members of the group ALPHV after it apparently failed to share a $22m ransom payment. According to Forescout’s Vedere Labs, RansomHub was announced on the cybercriminal forum RAMP and uses a payment model that benefits affiliates. The group conducted its first attack on Brazilian financial consulting firm YKP LTDA on 10 February and has since targeted 45 victims.