Rhysida (ELF)
- First seen
- 2023-05-01 00:00:00
- Malware type
- ransomware
- Family
- Malware family
- Profile updated
- 2026-07-07 13:11:34
Targeted industries: government-and-public-sector healthcare-and-pharmaceutical
Targeted regions: country_code:us country_code:gb
Context
Rhysida is a ransomware family known for targeting sectors such as government and healthcare. It encrypts files and demands ransom from its victims.
Reports & references
- fourcore.io — Rhysida Ransomware History Ttp Adversary Emulation (report)
- malpedia.caad.fkie.fraunhofer.de — Elf.Rhysida (report)
- shadowstackre.com — Rhysida (report)
- twitter.com — 1724165711356993736 (report)
- go.recordedfuture.com — Cta 2025 0130 (report)