ViceSociety is a financially motivated ransomware group that emerged in the summer of 2021, distinguishing itself by primarily targeting the education, healthcare, and government sectors globally. Unlike many ransomware-as-a-service (RaaS) operations, ViceSociety typically conducts its own intrusions and, in its early stages, deployed commercially available ransomware variants such as Hello Kitty/Five Hands and Zeppelin, rather than developing its own unique payload. More recently, the group has evolved its capabilities to include a custom ransomware builder and stronger encryption methods, such as 'PolyVice'. The group operates a double extortion model, stealing sensitive data before encryption and threatening to publish it on its data leak site if victims do not pay the ransom. ViceSociety has been observed operating under the aliases DEV-0832 and Vanilla Tempest, and is believed to be of Russian origin.

Aliases del actor

DEV-0832VanillaTempestVICE SPIDERVanilla TempestVicesocietyPrintNightmareHelloKittyZeppelin ransomware

Actores similares

VICE SPIDERapt · 0Scattered Spideractor · 2Indrik Spideractor · 1doppel-spideractor · 1salty-spideractor · 1brain-spideractor · 1skeleton-spideractor · 1bamboo-spideractor · 1andromeda-spideractor · 1cobalt-spideractor · 1