#EncryptHub
LightNews LightNews
bolhasec.com
Notícia da BleepingComputer

"Hacker sneaks infostealer malware into early access Steam game" #bolhasec
Hacker sneaks infostealer malware into early access Steam game
A threat actor called EncryptHub has compromised a game on Steam to distribute info-stealing malware to unsuspecting users downloading the title.
www.bleepingcomputer.com
August 5, 2025 at 10:30 PM
bolhasec.com
Notícia da SecurityWeek

"In Other News: Scattered Spider Still Active, EncryptHub Unmasked, Rydox Extraditions" #bolhasec
In Other News: Scattered Spider Still Active, EncryptHub Unmasked, Rydox Extraditions
Scattered Spider still active despite arrests, hacker known as EncryptHub unmasked, Rydox admins extradited to US.
www.securityweek.com
July 15, 2025 at 12:30 PM
bolhasec.com
Notícia da BleepingComputer

"EncryptHub's dual life: Cybercriminal vs Windows bug-bounty researcher" #bolhasec
EncryptHub's dual life: Cybercriminal vs Windows bug-bounty researcher
EncryptHub, a notorious threat actor linked to breaches at 618 organizations, is believed to have reported two Windows zero-day vulnerabilities to Microsoft, revealing a conflicted figure straddling t...
www.bleepingcomputer.com
June 11, 2025 at 12:30 PM
bolhasec.com
Notícia da SecurityWeek

"Gangue de Ransomware Russa Explorou Zero-Day do Windows Antes da Correção" #bolhasec
Russian Ransomware Gang Exploited Windows Zero-Day Before Patch
Exploitation of Windows MMC zero-day is being pinned on a ransomware gang known as EncryptHub (an affiliate of RansomHub)
www.securityweek.com
March 30, 2025 at 8:30 PM
ai-ru.at.thenote.app
Раскрытие EncryptHub: Помощь от ChatGPT и ошибки в оперативной безопасности

#ai #chatgpt #gpt
Unmasking EncryptHub: Help from ChatGPT and Opsec Blunders
outpost24.com
April 8, 2025 at 7:32 AM
cibered.com
⚖️ EncryptHub es un Cibercriminal o un Investigador de Seguridad: La doble vida de una amenaza cibernética ciberninjas.com/encrypthub-c...

#Cibercrimen #WhiteHatVsBlackHat #HackingÉtico #EncryptHub #AmenazasDigitales #Ciberseguridad #Investigación #Hackers #CyberEspionaje
EncryptHub es un Cibercriminal o un Investigador de Seguridad: La doble vida de una amenaza cibernética - CIBERNINJAS
EncryptHub, una figura notoria en el mundo de los ciberataques, ahora se encuentra en el centro de una controversia después de que se revelara que también
ciberninjas.com
April 10, 2025 at 4:32 PM
ethicalhackingnews.bsky.social
#Cybersecurity #ITSecurity #InfoSec #CyberNews #Hacking #EthicalHackingNews
Russian Group EncryptHub Exploits Microsoft Vulnerability to Deploy Advanced Stealer Malware
www.ethicalhackingnews.com
August 16, 2025 at 6:53 AM
bleepingcomputer.com.web.brid.gy
Hacker sneaks infostealer malware into early access Steam game
A threat actor called EncryptHub has compromised a game on Steam to distribute info-stealing malware to unsuspecting users downloading the title. [...]
www.bleepingcomputer.com
July 24, 2025 at 5:12 PM
bleepingcomputer.com.web.brid.gy
EncryptHub's dual life: Cybercriminal vs Windows bug-bounty researcher
EncryptHub, a notorious threat actor linked to breaches at 618 organizations, is believed to have reported two Windows zero-day vulnerabilities to Microsoft, revealing a conflicted figure straddling the line between cybercrime and security research. [...]
www.bleepingcomputer.com
April 8, 2025 at 10:18 AM
bleepingcomputer.com.web.brid.gy
EncryptHub linked to MMC zero-day attacks on Windows systems
A threat actor known as EncryptHub has been linked to Windows zero-day attacks exploiting a Microsoft Management Console vulnerability patched this month. [...]
www.bleepingcomputer.com
March 26, 2025 at 11:01 AM
bleepingcomputer.com.web.brid.gy
EncryptHub linked to MMC zero-day attacks on Windows systems
A threat actor known as EncryptHub has been linked to Windows zero-day attacks exploiting a Microsoft Management Console vulnerability patched this month. [...]
www.bleepingcomputer.com
March 26, 2025 at 7:08 AM
bleepingcomputer.com.web.brid.gy
EncryptHub linked to MMC zero-day attacks on Windows systems
A threat actor known as EncryptHub has been linked to Windows zero-day attacks exploiting a Microsoft Management Console vulnerability patched this month. [...]
www.bleepingcomputer.com
March 26, 2025 at 4:10 AM
bleepingcomputer.com.web.brid.gy
EncryptHub breaches 618 orgs to deploy infostealers, ransomware
A threat actor tracked as 'EncryptHub,' aka Larva-208,  has been targeting organizations worldwide with spear-phishing and social engineering attacks to gain access to corporate networks. [...]
www.bleepingcomputer.com
February 27, 2025 at 1:18 AM
royans.bsky.social
Microsoft credited notorious hacker EncryptHub for reporting Windows vulnerabilities, exposing a dual life of bug bounty hunter and threat actor. #Cybersecurity #BugBounty #ThreatActor
EncryptHub's Dual Life: Hacker and Bug Reporter
Microsoft credited notorious hacker EncryptHub for reporting Windows vulnerabilities, exposing a dual life of bug bounty hunter and threat actor. #Cybersecurity #BugBounty #ThreatActor
www.bleepingcomputer.com
April 9, 2025 at 3:32 AM
cecallihelper.bsky.social
"Trustwave SpiderLabs said it recently observed an EncryptHub [Russia] campaign that brings together social engineering and the exploitation of a vulnerability in the Microsoft Management Console (MMC) framework (CVE-2025-26633, aka MSC EvilTwin)" patched thehackernews.com/2025/08/russ... #cybersec
Russian Group EncryptHub Exploits MSC EvilTwin Vulnerability to Deploy Fickle Stealer Malware
EncryptHub exploits CVE-2025-26633 with social engineering and rogue MSC files, delivering Fickle Stealer malware.
thehackernews.com
August 16, 2025 at 4:16 PM
phishingnews.bsky.social
“EncryptHub Deploys Ransomware and Stealer via Trojanized Apps, PPI Services, and Phishing” — The Hacker News

#PhishingNews #Phishing #Ransomware
White text on a dark blue background reads, “EncryptHub Deploys Ransomware and Stealer via Trojanized Apps, PPI Services, and Phishing”.
March 6, 2025 at 12:37 PM
handle.invalid
#EncryptHubReward
Article: https://thehackernews.com/2025/04/microsoft-credits-encrypthub-hacker.html
April 5, 2025 at 6:04 PM
handle.invalid
Microsoft rewarded EncryptHub, a prolific hacker (618+ breaches), for responsibly disclosing two Windows vulnerabilities (CVE-2025-24061 & CVE-2025-24071). Outpost24 suggests a lone actor with a mixed past, active until 2022, possibly imprisoned, and recently returned.#EncryptHubReward
April 5, 2025 at 6:04 PM
handle.invalid
Water Gamayun/EncryptHub/LARVA-208 used CVE-2025-26633 to deploy SilentPrism/DarkWisp backdoors via .msi/.msc files, installing stealers (Rhadamanthys, StealC) and enabling remote access (AnyDesk) via LOLBins (runnerw.exe).#SilentPrismDarkWispMSIAttack
April 1, 2025 at 6:02 AM
handle.invalid
#EncryptHubThreat
Article: https://thehackernews.com/2025/03/encrypthub-deploys-ransomware-and.html
March 7, 2025 at 9:03 AM
handle.invalid
EncryptHub, a financially driven threat actor, deploys stealers (Fickle, StealC, Rhadamanthys) and ransomware via phishing, trojanized apps (QQ, WeChat), and LabInstalls. They target high-value organizations using EncryptRAT C2 and bulletproof hosting.#EncryptHubThreat
March 7, 2025 at 9:03 AM
handle.invalid
#EncryptHubThreat
Article: https://www.bleepingcomputer.com/news/security/encrypthub-breaches-618-orgs-to-deploy-infostealers-ransomware/
February 27, 2025 at 5:02 AM
handle.invalid
EncryptHub (Larva-208), active since June 2024, has hit 618 orgs via spear-phishing. It uses RMM, infostealers (Stealc, Rhadamanthys), and custom ransomware (.crypted), targeting crypto wallets, VPNs, and password managers. Linked to RansomHub & BlackSuit, it uses bulletproof hosting.
February 27, 2025 at 5:02 AM
qiancx.bsky.social
EncryptHub利用虚假AI平台攻击Web3开发者，传播Fickle窃取者恶意软件

https://qian.cx/posts/608C3200-0BB2-4CA0-9CBE-5C5CC560D81F
October 30, 2025 at 1:53 AM
technadu.com
🎮 Hackers weaponized Steam again.
EncryptHub compromised Chemia, an early access game, to deploy HijackLoader, Vidar, and Fickle Stealer.

– Malware fetches payloads via PowerShell & Telegram
– Steals browser credentials & crypto wallet data

Early access ≠ , early trust. Stay alert.
#Steam
Hackers weaponized Steam again. EncryptHub compromised Chemia—an early access game—to deploy HijackLoader, Vidar, and Fickle Stealer.
July 26, 2025 at 1:44 PM