Security News > 2023 > August > New Report Exposes Vice Society's Collaboration with Rhysida Ransomware

Tactical similarities have been unearthed between the double extortion ransomware group known as Rhysida and Vice Society, including in their targeting of education and healthcare sectors.

"As Vice Society was observed deploying a variety of commodity ransomware payloads, this link does not suggest that Rhysida is exclusively used by Vice Society, but shows with at least medium confidence that Vice Society operators are now using Rhysida ransomware," Check Point said in a new report.

Vice Society, tracked by Microsoft under the name Storm-0832, has a pattern of employing already existing ransomware binaries that are sold on criminal forums to pull off their attacks.

The latest findings from the Israeli cybersecurity firm have revealed a "Clear correlation" between the emergence of Rhysida and the disappearance of Vice Society.

"Ever since Rhysida first appeared, Vice Society has only published two victims," Check Point said.

"Our analysis of Rhysida ransomware intrusions reveals clear ties between the group and the infamous Vice Society, but it also reveals a grim truth - the TTPs of prolific ransomware actors remain largely unchanged," the company said.

News URL

https://thehackernews.com/2023/08/new-report-exposes-vice-societys.html