CrazyHunter ransomware escalates with advanced intrusion tactics, six Taiwan healthcare victims confirmed

CrazyHunter ransomware is described as a serious and escalating threat by Trellix, with six confirmed victims among healthcare organisations in Taiwan. Trellix has tracked the malware since its first appearance, noting rapid technical evolution and increasing activity. Technically, CrazyHunter is a Go-developed ransomware and a fork of the Prince ransomware that surfaced in mid-2024, but it incorporates meaningful enhancements, particularly in network intrusion methods and anti-malware evasion capabilities.

CrazyHunter employs advanced encryption and delivery methods targeted against Windows-based machines, and uses a data leak site to publicise victim information, according to Aswath A, a Trellix researcher, who wrote in a company blog post last week. Read more at Industrial Cyber.