Hunt / rhysida
rhysida
43victims, 90d
Nov 7last post
0reports about them
-techniques with a rule
0indicators
Nothing published that we can read says how rhysida gets in or what it runs once inside. This page is who they hit, and that is all we have. If you know of a public write-up, it belongs here.
Who they hit
| Posted | Victim | Country |
|---|---|---|
| 2026-11-07 | Treuhand & Immobilien Abt AG | CH |
| 2026-11-04 | El Cajon, CA | US |
| 2026-11-04 | Juge, Napolitano, Ruli, Putfark & Pittman | ?? |
| 2026-11-03 | Here at Pope and Johnson County Title Company | ?? |
| 2026-10-31 | Phoenix Charter Academy | US |
| 2026-10-30 | Cipsa Industrias Sa De Cv | MX |
| 2026-10-30 | INTI International University & Colleges | MY |
| 2026-10-29 | INTAX, Inc. | ?? |
| 2026-10-29 | ClaimTek Systems | ?? |
| 2026-10-28 | Noelker and Hull | US |
| 2026-10-27 | Machelen (Belgium) | BE |
| 2026-10-26 | MISC Group | MY |
Latest 12 of 43, from ransomware.live. These are the group's claims.
Confirmed elsewhere
Victims of rhysida that a second, independent source also named inside two weeks. How convergence works.
- 2026-07-23 The Lawson Roofing Co Inc. leak + notice
Sweep
No indicators. Either nobody has published any for rhysida, or the reports cite values without marking them as IOCs. package.json