EncryptHub Deploys Ransomware and Stealer via Trojanized Apps, PPI Services, and Phishing
EncryptHub Deploys Ransomware and Stealer via Trojanized Apps, PPI Services, and Phishing
06 March 2025
The financially motivated threat actor known as EncryptHub has been observed orchestrating sophisticated phishing campaigns to deploy information stealers and ransomware, while also working on a new product called EncryptRAT.
"EncryptHub has been observed targeting users of popular applications, by distributing trojanized versions," Outpost24 KrakenLabs said in a new report shared with The