Beware the Malware: EncryptHub’s Phishy Business and Ransomware Shenanigans!
EncryptHub is targeting users with trojanized apps and sophisticated phishing campaigns, deploying information stealers and ransomware. They’ve even left a five-star review for their malware installer service! Organizations need to stay on high alert and adopt robust security measures to counter this evolving threat actor.

Hot Take:
EncryptHub is like that annoying party crasher who not only sneaks in with a fake invite but also makes off with your best silverware and the fancy snacks. These digital miscreants are not just phishing for compliments, they’re phishing for your credentials, money, and anything else they can get their virtual hands on. It’s high time we crash their party instead!
Key Points:
- EncryptHub is running sophisticated phishing campaigns to deploy information stealers and ransomware.
- They’re using Pay-Per-Install (PPI) services to spread their malware more efficiently.
- The group targets users of popular apps with trojanized versions to gain initial access.
- EncryptHub affiliates with other ransomware groups like RansomHub and Blacksuit.
- They’re developing a new tool called EncryptRAT to manage infections and potentially commercialize it.
Already a member? Log in here