Active since 2018, the actors behind Mespinoza ransomware, also known as the Protect Your Systems Amigo (PYSA) group are opportunistic attackers looking to earn a profit. It is unclear where these threat actors are based, but unlike many of the other ransomware groups, PYSA actors are indiscriminate in their targeting of educational institutions, healthcare facilities, foster care, and more. The group has joined the growing trend of leaking data, that has been stolen during a ransomware attack, on the dark web. Even companies who...
Read the full report here: IR-21-081-001-PYSA Ransomware.pdf
Comments