US State Department’s $10 Million Bounty on Information Relating to Hive Ransomware Members 

The US State Department announced a $10 million reward for information that could help identify or locate key members of the Hive ransomware gang. An additional $5 million reward is being offered for information leading to the arrest/conviction of individuals who were active members of the gang or attempted to participate in the ransomware gang’s activities. The Hive ransomware gang is a transnational organized crime group that has been credited for extorting up to $100 million across roughly 1,300 companies from around eighty (80) countries between June 2021 and November 2022. They acted as a ransomware-as-a-service (RaaS) operator, first surfacing in June 2021, and were known for breaching organizations by means of phishing campaigns, exploiting vulnerabilities in internet-exposed devices and using purchased credentials. These reward announcements come a year after an international law enforcement operation seized control of Hive’s servers and Tor websites in January 2023. That operation led to the capturing of Hive’s decryption key, helping prevent victims from paying $130 million in active ransom demands. The infiltration of the Hive ransomware operation was especially impressionable because, unlike other ransomware groups, Hive wasn’t known to discriminate against targets and weren’t afraid to breach and encrypt anyone, including emergency services and healthcare entities. The rewards, which are offered through the Transitional Organized Crime Rewards Program (TOCRP), have previously been used to announce bounties relating to members of the Clop, Conti, REvil, and Darkside ransomware operations in the past. This current announcement from the State Department, along with past ones, signals the continued commitment by law enforcement to lay down the hammer on transnational cybercrime.