Threat Advisories:
🎧 Hive Force Labs: Critical Threats Affecting You This Week - 5 Minute Audio Intelligence Report
👥 Play Count: Loading...

SocGholish and RansomHub: A Dangerous Cybercrime Alliance

Red | Attack Report
Download PDF

The Water Scylla attack exploits compromised websites and the Keitaro Traffic Distribution System (TDS) to distribute SocGholish malware, tricking users into downloading fake browser updates. Once executed, SocGholish facilitates data theft, persistence, and lateral movement within the network. Attackers leverage PowerShell scripts and credential theft tools to escalate privileges and gain deeper access. Ultimately, RansomHub ransomware is deployed, encrypting files and demanding payment. The campaign primarily targets organizations worldwide, with a focus on the US, Japan, and Taiwan.

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox

Cybersecurity Leaders Dinner In Houston

Learn how to reduce your exposure to imminent risk & Network with Industry Peers

Hosted by former CISO, Al Lindseth and Threat Exposure Evangelist, Critt Golden.

Tuesday, October 7th, 2025
6.00 pm to 9.00 pm
Del Friscos Double Eagle Steakhouse, Houston TX