Rhysida

Also known as: Vice Society

Overview

Ransomware group targeting healthcare, education, and government. Known for auctioning stolen data. Linked to former Vice Society operators.

MITRE ATT&CK Coverage

Recon
Res Dev
Init Access
Execution
Persistence
Priv Esc
Def Evasion
Cred Access
Discovery
Lat Move
Collection
C2
Exfil
Impact
3 of 14 tactics observed

Raw TTPs

RansomwareData AuctionPhishingVPN ExploitationCobalt Strike

Related Intelligence (1)

CRITICALRansomwareExploited

Rhysida Ransomware Attacks Five US Hospital Systems in Coordinated Campaign

Rhysida ransomware group simultaneously attacks five US hospital systems, forcing ER diversions and surgical cancellations across 23 facilities.

Epic EHR
HHS HC3 / FBI