Daixin Team is a financially motivated, Russian-speaking ransomware and data extortion group that emerged in June 2022. The group's primary motivation is financial gain, specifically through the exfiltration and encryption of sensitive data, particularly Patient Health Information, which commands high prices on the dark web. They employ a double extortion model, threatening to publicly leak stolen data if ransom demands are not met. What distinguishes Daixin Team is its pronounced focus on targeting the Healthcare and Public Health sector, and its use of ransomware based on the leaked Babuk Locker source code, often targeting VMware vCenter and ESXi servers for maximum impact.

Paises afectados

Sectores atacados

URLs nuevas detectadas en IntelTracker