Video, RansomwareCosmicBeetle joins the ranks of RansomHub affiliates — Week in security with Tony Anscombe===========================================================================================ESET research also finds that CosmicBeetle attempts to exploit the notoriety of the LockBit ransomware gang to advance its own ends [![Editor](https://web-assets.esetstatic.com/tn/-x45/wls/2013/12/pen-tip-200.png)](/en/our-experts/editor/ ‘Editor’) [**Editor**](/en/our-experts/editor/ ‘Editor’)13 Sep 2024 This week, ESET researchers published a deep dive into the recent activities of the CosmicBeetle cybercrime group. Among other notable things, CosmicBeetle was found to abuse the infamy of the LockBit ransomware gang for its own ends. Also, the analysis revealed that CosmicBeetle is likely to be a new affiliate of the ransomware-as-a-service actor RansomHub, as well as that it has compromised SMBs in various parts of the world with its new ScRansom ransomware. This ransomware, however, exhibits decryption issues to the point that it’s actually impossible to restore some encrypted files.How does CosmicBeetle attack its targets and what else is there to know about their recent campaigns? Learn more in the video and read the full write-up here: [CosmicBeetle steps up: Probation period at RansomHub](https://www.welivesecurity.com/en/eset-research/cosmicbeetle-steps-up-probation-period-ransomhub/).Connect with us on [Facebook](https://www.facebook.com/eset), [Twitter](https://twitter.com/ESET), [LinkedIn](https://www.linkedin.com/company/eset/) and [Instagram](https://www.instagram.com/eset/). *** ** * ** ***Let us keep youup to date—————————–Sign up for our newsletters Ukraine Crisis newsletter Regular weekly newsletter Subscribe #### Related Articles*** ** * ** ***[VideoBitcoin ATM scams skyrocket — Week in security with Tony Anscombe![Bitcoin ATM scams skyrocket – Week in security with Tony Anscombe](https://web-assets.esetstatic.com/tn/-x145/wls/2024/9-2024/weekly-video-tony-anscombe.png)VideoBitcoin ATM scams skyrocket — Week in security with Tony Anscombe](/en/videos/bitcoin-atm-scams-skyrocket-week-security-tony-anscombe/ ‘Bitcoin ATM scams skyrocket – Week in security with Tony Anscombe’) *** ** * ** ***[VideoStealing cash using NFC relay — Week in Security with Tony Anscombe![Stealing cash using NFC relay – Week in Security with Tony Anscombe](https://web-assets.esetstatic.com/tn/-x145/wls/2023/2023-12/wls-thumbnail-tony-anscombe-v3-jpg.jpeg)VideoStealing cash using NFC relay — Week in Security with Tony Anscombe](/en/videos/stealing-cash-using-nfc-relay-week-in-security-with-tony-anscombe/ ‘Stealing cash using NFC relay – Week in Security with Tony Anscombe’) *** ** * ** ***[Video, Mobile SecurityExploring Android threats and ways to mitigate them -| Unlocked 403 cybersecurity podcast (ep. 5)![Exploring Android threats and ways to mitigate them | Unlocked 403 cybersecurity podcast (ep. 5)](https://web-assets.esetstatic.com/tn/-x145/wls/2024/8-2024/unlocked-403-podcast-cybersecurity-android-malware.png)Video, Mobile SecurityExploring Android threats and ways to mitigate them -| Unlocked 403 cybersecurity podcast (ep. 5)](/en/videos/exploring-android-threats-and-ways-to-mitigate-them-unlocked-403-cybersecurity-podcast-ep5/ ‘Exploring Android threats and ways to mitigate them | Unlocked 403 cybersecurity podcast (ep. 5)’) ### Similar Articles[ESET researchCosmicBeetle steps up: Probation period at RansomHub![CosmicBeetle steps up: Probation period at RansomHub](https://web-assets.esetstatic.com/tn/-x82/wls/2024/9-2024/cosmic-beetle/cosmicbeetle-ransomhub-ransomware-affiliate.jpeg)](/en/eset-research/cosmicbeetle-steps-up-probation-period-ransomhub/ ‘CosmicBeetle steps up: Probation period at RansomHub’)*** ** * ** ***[ESET ResearchScarabs colon-izing vulnerable servers![Scarabs colon-izing vulnerable servers](https://web-assets.esetstatic.com/tn/-x82/wls/2023/2023-8/cosmicbeetle.jpeg)](/en/eset-research/scarabs-colon-izing-vulnerable-servers/ ‘Scarabs colon-izing vulnerable servers’)*** ** * ** ***[ESET researchRescoms rides waves of AceCryptor spam![Rescoms rides waves of AceCryptor spam](https://web-assets.esetstatic.com/tn/-x82/wls/2024/3-2024/acecryptor-rescoms/acecryptor-rescoms-spam.jpeg)](/en/eset-research/rescoms-rides-waves-acecryptor-spam/ ‘Rescoms rides waves of AceCryptor spam’)*** ** * ** ***### Share Article[](https://www.facebook.com/sharer/sharer.php?u=https://www.welivesecurity.com/en/videos/cosmicbeetle-joins-ranks-ransomhub-affiliates-week-security-tony-anscombe/ ‘Facebook’) [](https://www.linkedin.com/shareArticle?mini=true&url=https://www.welivesecurity.com/en/videos/cosmicbeetle-joins-ranks-ransomhub-affiliates-week-security-tony-anscombe/ ‘LinkedIn’) [](https://twitter.com/intent/tweet?url=https://www.welivesecurity.com/en/videos/cosmicbeetle-joins-ranks-ransomhub-affiliates-week-security-tony-anscombe/ ‘Twitter’) [](mailto:?&subject=I wanted you to see this site&body=https://www.welivesecurity.com/en/videos/cosmicbeetle-joins-ranks-ransomhub-affiliates-week-security-tony-anscombe/ ‘mail’) [](https://www.welivesecurity.com/en/videos/cosmicbeetle-joins-ranks-ransomhub-affiliates-week-security-tony-anscombe/ ‘copy’) ![Apt Activity Report](https://www.welivesecurity.com/build/assets/apt-activity-report-4523d00f.webp) ### Discussion
Related Tags:
NAICS: 541 – Professional
Scientific
Technical Services
NAICS: 518 – Computing Infrastructure Providers
Data Processing
Web Hosting
Related Services
NAICS: 51 – Information
Blog: ESET We Live Security
Data Staged
Associated Indicators: