SharpRhino Strikes: IT Workers Beware of This New Ransomware RAT

Hunters International is targeting IT workers with SharpRhino, a new C# remote access trojan (RAT), to breach corporate networks. Disguised as Angry IP Scanner, SharpRhino helps the group gain initial infection, elevate privileges, and deploy ransomware. Quorum Cyber researchers urge caution with search results and…

Hot Take:

Oh, great! Just what we needed in 2024: a rebranded ransomware group with a penchant for typosquatting and a shiny new RAT. Looks like IT professionals will need more than just coffee to get through their workday.

Key Points:

  • Hunters International targets IT workers with SharpRhino, a new C# remote access trojan (RAT).
  • SharpRhino is deployed via a typosquatting site mimicking Angry IP Scanner.
  • The group is suspected to be a rebrand of the infamous Hive ransomware gang.
  • Notable victims include Austal USA, Hoya, Integris Health, and Fred Hutch Cancer Center.
  • In 2024, Hunters International has already claimed responsibility for 134 ransomware attacks.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here