Vice Society
Medium ConfidenceHigh ThreatDEV-0832
Vice Society is a ransomware operation that has been active since at least 2021, primarily targeting education and healthcare sectors. The group is notable for using various ransomware strains rather than developing their own, including HelloKitty, Zeppelin, and custom variants. Vice Society gained significant attention for numerous attacks against K-12 schools and universities, causing widespread disruption to educational institutions. The group employs double extortion tactics and maintains a leak site for publishing stolen data.
Vice Society is a ransomware operation that has been active since at least 2021, primarily targeting education and healthcare sectors. The group is notable for using various ransomware strains rather than developing their own, including HelloKitty, Zeppelin, and custom variants. Vice Society gained significant attention for numerous attacks against K-12 schools and universities, causing widespread disruption to educational institutions. The group employs double extortion tactics and maintains a leak site for publishing stolen data.
Target Sectors
Target Regions
Attributed to Cybercriminal (No State Sponsor) (Russia). Attribution confidence: Medium.
Future Outlook
Vice Society is expected to continue operations targeting Education sectors.
First observed activity of Vice Society
Continued active operations