Ransomware Group RansomHub Targets Avant IT Norway

Ransomware group RansomHub has allegedly attacked Avant IT Norway, although no further details have been disclosed. Avant IT is a digital collaboration and integrations company with a focus on Microsoft 365, programming and adaptations, document management, onsite services, and remote support, among others.

RansomHub is a relatively new ransomware-as-a-service (RaaS) operation whose darknet site features an Index page where all its victims are listed, as well as About and Contact pages. The group claims to be a team of hackers from around the world, motivated by one thing – financial gain. However, the gang does say that it does not allow attacks against certain targets, including CIS, Cuba, North Korea, and China.

The group also lists a few general rules that it follows and rules for its affiliates. RansomHub does not allow non-profit organizations to be targeted or re-attacked; in other words, it prohibits follow-up attacks on victims who have already paid.