The Threat CodexMay 1, 2025
IP cluster linking ransomware activity and Eye Pyramid C2
#EyePyramid #RansomHub #Rhysida #ViceSociety
https://www.intrinsec.com/wp-content/uploads/2025/04/TLP-CLEAR-IP-cluster-linking-ransomware-activity-and-Eye-Pyramid-C2-EN.pdf
NetSec.newsSep 27, 2024
🚨 Vanilla Tempest (Vice Society) strikes again with ransomware attacks on key industries! 🖥️ Critical infrastructure, healthcare systems on high alert... #CyberSecurity #Ransomware #ViceSociety https://www.netsec.news/alert-on-inc-ransomware-attacks-conducted-by-vanilla-tempest-vice-society-threat-group/
Alert On INC Ransomware Attacks Conducted by Vanilla Tempest (Vice Society) Threat Group - NetSec.News

Microsoft published an alert regarding a cybercriminal group known as Vanilla Tempest, which is deploying INC ransomware to attack the U.S. healthcare industry. INC ransomware, ... Read more

NetSec.News
Matt WillemsenJun 9, 2023
Vice Society: The #1 cyberthreat to schools, colleges, and universities
According to a recent Malwarebytes Threat Brief, in the last 12 months, the Vice Society ransomware gang has conducted more known attacks against education targets globally, and in the USA and the UK individually, than any other ransomware group.
https://www.malwarebytes.com/blog/news/2023/06/vice-society #ViceSociety #malware #ransomware #schools
Vice Society: The #1 cyberthreat to schools, colleges, and universities

In the last 12 months, the Vice Society ransomware gang has conducted more known attacks against education targets globally, and in the USA and the UK individually, than any other ransomware group.

Malwarebytes
Falcon FeedsMay 12, 2023

Vice Society #ransomware group added DATALAN (http://datalan.sk) to their victim list.

#Slovakia
#ViceSociety #darkweb #databreach

Just Another Blue TeamerApr 17, 2023

Happy Monday! The #ViceSociety ransomware gang has been busy and so has the Palo Alto Networks Unit 42 team. They recently discovered that the #ransomware gang created a custom #Powershell script used to exfil data from the victim network and the team conducts a technical breakdown of it! Enjoy and #HappyHunting!

Vice Society: A Tale of Victim Data Exfiltration via PowerShell, aka Stealing off the Land
https://unit42.paloaltonetworks.com/vice-society-ransomware-powershell/

#CyberSecurity #ITSecurity #InfoSec #BlueTeam #ThreatIntel #ThreatHunting #ThreatDetection #HappyHunting #readoftheday

Vice Society: A Tale of Victim Data Exfiltration via PowerShell, aka Stealing off the Land

The Vice Society ransomware gang exfiltrated victim network data using a custom Microsoft PowerShell script. We dissect how each function of it works.

Unit 42
securityaffairsApr 17, 2023
#ViceSociety gang is using a custom #PowerShell tool for data exfiltration
https://securityaffairs.com/144898/cyber-crime/vice-society-powershell-tool-exfiltration.html
#securityaffairs #hackingisnotacrime
Vice Society gang is using a custom PowerShell tool for data exfiltration

Vice Society ransomware operators have been spotted using a PowerShell tool to exfiltrate data from compromised networks. Palo Alto Unit 42 team identified observed the Vice Society ransomware gang exfiltrating data from a victim network using a custom-built Microsoft PowerShell (PS) script. Threat actors are using the PowerShell tool to evade software and/or human-based security detection mechanisms. PS scripting […]

Security Affairs
Adrian Riskin Mar 27, 2023

The BARTPD documents recently dumped by Vice Society contain a 5 page "5150 and Problem Person list" that I haven't seen any reporting on. Is this kind of thing commonplace among transit LEAs? I don't have much experience with this kind of thing in LA. Here's one blurred out page to give you an idea of what they're doing. I'm not linking to the original because it's very invasive.

#BART #BARTPD #BayAreaRapidTransit #ViceSociety #Ransomware #ACAB #5150 #ProblemPersonList #PublicRecords #PoliceAbolition #PoliceSpying

Adrian Riskin Mar 27, 2023

Police uniform invoice from Vice Society's dump of BART PD documents. $1223 for body armor, three shirts, and two pairs of pants.

#BART #BARTPD #BayAreaRapidTransit #ViceSociety #Ransomware #ACAB #BodyArmor #PublicRecords #PoliceAbolition

https://user.fm/files/v2-49303ab1aabff569a3b387993bc3d767/056566_Narcisse_G_uniform%20rebursmnt_07-23-2014_0000006945.pdf

dispatchMar 2, 2023
Vice Society publishes data stolen during Vesuvius ransomware attack https://grahamcluley.com/vice-society-publishes-data-stolen-during-vesuvius-ransomware-attack/ #ViceSociety #Ransomware #databreach #ransomware #Dataloss #Malware
Vice Society publishes data stolen during Vesuvius ransomware attack

A notorious ransomware gang has claimed responsibility for a cyber attack against Vesuvius, the London Stock Exchange-listed molten metal flow engineering…

Graham Cluley
ITSEC NewsMar 2, 2023
Vice Society publishes data stolen during Vesuvius ransomware attack - A notorious ransomware gang has claimed responsibility for a cyber attack against Vesuviu... https://grahamcluley.com/vice-society-publishes-data-stolen-during-vesuvius-ransomware-attack/ #vicesociety #ransomware #databreach #dataloss #malware
Vice Society publishes data stolen during Vesuvius ransomware attack

A notorious ransomware gang has claimed responsibility for a cyber attack against Vesuvius, the London Stock Exchange-listed molten metal flow engineering…

Graham Cluley