Security News > 2021 > February > French MNH health insurance company hit by RansomExx ransomware
French health insurance company Mutuelle Nationale des Hospitaliers has suffered a ransomware attack that has severely disrupted the company's operations.
MNH is the first mutual insurance company in France to provide health insurance services, and plans focused on the health sector.
This Tor site belongs to a ransomware operation called RansomExx, a rebranded version of the Defray777 ransomware.
While this ransomware group has been in operation since 2018, it became much more active in June 2020 when it rebranded as RansomExx and began to target high-profile organizations.
Like other human-operated ransomware operations, RansomExx will compromise a network and begin harvesting unencrypted files for their extortion attempts.
Unlike most other ransomware operations, RansomExx also created a Linux version to ensure they can target all critical servers and data in an organization.