The United States Federal Bureau of Investigation Director Christopher Wray said that international law enforcement groups have dismantled the infamous Hive cryptocurrency ransomware gang. He claimed that the operation has recovered over 1,300 decryption keys for victims since July 2022 and prevented $130 million in ransomware payments.
Officials raised the example of one incident where a Hive ransomware attack on a Louisiana hospital was thwarted by law enforcement, saving the victim from a $3-million ransom payment.
Ghost servers were reportedly seized Wednesday night in an international law enforcement effort between U.S. authorities, the German Reutlingen Police Headquarters, the German Federal Criminal Police, the Netherlands National High Tech Crime Unit and Europol to track ransom payments, seize them back to victims, and dismantle the network’s infrastructure.
The organization had been infiltrated by undercover agents since July 2022. As told by Wray, law enforcement gained clandestine, persistent access to Hive’s control panels since that time and had been secretly helping victims recover their assets and locked devices unbeknownst to Hive.