Hive Ransomware — Victims, Campaigns & Activity

Threat entity extracted from intelligence sources

Frequency
11
occurrences
First Seen
October 31, 2025
Last Seen
June 12, 2026

Hive is a ransomware_group tracked across 9 threat clusters and 11 intelligence report mentions on ThreatCluster. First observed October 31, 2025; most recent activity June 12, 2026.

Related Threat Clusters

  • Brute Force Attack Reveals Ransomware Infrastructure Network

    A routine brute-force alert on exposed RDP led the Huntress Tactical Response Team to uncover a complex ransomware-as-a-service ecosystem. The investigation revealed unusual credential-hunting behavior and a network of…

    1 article · Updated March 4, 2026
  • Ukrainian National Pleads Guilty in Conti Ransomware Case

    Oleksii Oleksiyovych Lytvynenko, a 44-year-old Ukrainian national, pleaded guilty to conspiracy to commit wire fraud related to the Conti ransomware operation. This group was responsible for over 1,000 attacks…

    17 articles · Updated June 12, 2026
  • FBI Seizes RAMP Cybercrime Forum Used by Ransomware Gangs

    The FBI has seized the RAMP cybercrime forum, a key platform for ransomware operations and other digital crimes. Both the forum's dark web and clearnet domains now display a seizure notice attributed to the FBI,…

    16 articles · Updated January 28, 2026
  • Cybercrime Groups Roasted: A New Approach to Threat Awareness

    Cybercrime crews are often portrayed as formidable entities, but industry leaders are advocating for a shift in narrative. Former CISA head Jen Easterly and Trellix VP John Fokker emphasize that these actors are merely…

    2 articles · Updated April 5, 2026
  • Global Signing of the Hanoi Convention Against Cybercrime

    On October 25, 2025, the United Nations Convention against Cybercrime was opened for signature in Hanoi, Vietnam, with 72 countries signing the treaty. This treaty aims to combat cybercrime and enhance international…

    4 articles · Updated May 21, 2026
  • Ukrainian National Extradited for Conti Ransomware Charges Facing 25 Years in Prison

    Oleksii Oleksiyovych Lytvynenko, a 43-year-old Ukrainian national, has been extradited from Ireland to the United States on charges related to the Conti ransomware group. He allegedly controlled stolen data and sent…

    2 articles · Updated October 31, 2025
  • Ukrainian Extradited to US for Role in Conti Ransomware Operation

    Oleksii Lytvynenko, a 43-year-old Ukrainian national, has been extradited from Ireland to the United States to face charges related to the Conti ransomware operation. He is accused of participating in cybercrimes that…

    4 articles · Updated November 4, 2025
  • Hacker Steals 2.3TB of Data from FS Italiane via Almaviva Breach

    A hacker has claimed responsibility for stealing 2.3 terabytes of data from the FS Italiane Group after breaching its IT services provider, Almaviva. The leaked data, which has been posted on a dark web forum,…

    4 articles · Updated November 20, 2025
  • Massive Data Theft from Italian Railway Operator FS Italiane Group

    The FS Italiane Group, Italy's national railway operator, suffered a data breach after a hacker compromised its IT services provider, Almaviva. The attacker claims to have stolen 2.3 terabytes of sensitive data, which…

    4 articles · Updated November 22, 2025

Recent Intelligence Reports

  • Ukrainian national pleads guilty to role in Conti ransomware operation — Bleepingcomputer · June 12, 2026
  • Ukrainian national pleads guilty to role in Conti ransomware operation — Bleepingcomputer · June 12, 2026
  • Russian Motivations Hanoi Convention Cybercrime — www.justsecurity.org · May 21, 2026
  • Don't glamorize cybercrims, roast them instead — Theregister · April 5, 2026
  • Researchers didn’t want to glamorize cybercrims. So they roasted them — Theregister · April 5, 2026
  • How a Brute Force Attack Unmasked a Ransomware Infrastructure Network — Bleepingcomputer · March 4, 2026
  • FBI's RAMP Takedown: Dismantling Ransomware's Last Open Market — Webpronews · January 29, 2026
  • FBI seizes RAMP cybercrime forum used by ransomware gangs — Bleepingcomputer · January 28, 2026

CVSS v3.1 Breakdown