Hackers have compromised the infrastructure of a Mexican governmental platform and deployed ransomware, threatening to release the stolen information onto the dark web.
The attacker, called RansomHub, is one of the world’s most prolific. Given their tools and way of operation, it’s likely a Russian ransomware group, especially since they also state they don’t target organizations from Cuba, North Korea, China and the Commonwealth of Independent States (Russia and most of the former USSR state