Rhysida
Medium ConfidenceHigh ThreatVice Society 2.0
Rhysida is a ransomware-as-a-service operation that emerged in May 2023, targeting government, education, healthcare, and manufacturing sectors. The group gained significant attention for attacks against healthcare organizations and government entities. Rhysida employs double extortion tactics and positions themselves as a 'penetration testing team' exposing security weaknesses. The group has demonstrated sophisticated capabilities in network penetration and data exfiltration.
Rhysida is a ransomware-as-a-service operation that emerged in May 2023, targeting government, education, healthcare, and manufacturing sectors. The group gained significant attention for attacks against healthcare organizations and government entities. Rhysida employs double extortion tactics and positions themselves as a 'penetration testing team' exposing security weaknesses. The group has demonstrated sophisticated capabilities in network penetration and data exfiltration.
Target Sectors
Target Regions
Attributed to Cybercriminal (No State Sponsor) (Unknown). Attribution confidence: Medium.
Future Outlook
Rhysida is expected to continue operations targeting Healthcare sectors.
First observed activity of Rhysida
Continued active operations