Security News > 2023 > January > Hive ransomware disrupted after FBI hacks gang's systems
The Hive ransomware operation's Tor payment and data leak sites were seized as part of an international law enforcement operation after the FBI infiltrated the gang's infrastructure last July.
Today, the US Department of Justice and Europol announced that an international law enforcement operation secretly infiltrated the Hive ransomware gang's infrastructure in July 2022, when they secretly began monitoring the operation for five months.
"Since infiltrating Hive's network in July 2022, the FBI has provided over 300 decryption keys to Hive victims who were under attack. In addition, the FBI distributed over 1,000 additional decryption keys to previous Hive victims."
The Hive cybercriminal gang is run as a ransomware-as-a-service operation that launched in June 2021.
Unlike many ransomware operations that claim to avoid emergency services and healthcare entities, Hive is not particular about who they target.
In November 2022, the FBI stated that the ransomware operation generated approximately $100 million from over a 1,500 companies since June 2021.