India Cert Alert - RansomHub Ransomware

It has been reported that RansomHub ransomware is aggressively targeting enterprises with double extortion attacks causing data exfiltration and encryption. RansomHub operating as a Ransomware-as-a-Service (RaaS) is believed to be a rebranded version of Knight/Cyclops ransomware. The group focuses on the systems based on Windows Linux ESXi NAS and SFTP servers for attacks.