The RansomHub Ransomware Group Compromises Grupo Cuevas

Overview

The RansomHub ransomware group has reportedly compromised Grupo Cuevas. 26 GB of data has allegedly been exfiltrated, and a ransom deadline of 24 April has been given.

Background

Grupo Cuevas has a long history, built over three centuries by four generations of the Cuevas family. It operates prominently in different sectors of food distribution and agri-food industry.

RansomHub Group

RansomHub is a relatively new ransomware-as-a-service operation whose darknet site features an Index page where all its victims are listed, as well as About and Contact pages. The group claims to be a team of hackers from around the world, motivated by one thing – financial gain. However, the gang does say that it does not allow attacks against certain targets, including CIS, Cuba, North Korea, and China. The group also lists a few general rules that it follows and rules for its affiliates. RansomHub does not allow non-profit organizations to be targeted or re-attacked; in other words, it prohibits follow-up attacks on victims who have already paid.