Vice Society gang switches to new custom ransomware

Threat Level

Attack Report

For a detailed threat advisory, download the pdf file here

Summary

Vice Society is a well-established ransomware group that has successfully targeted a range of enterprises. They aim to maximize their financial gain by using the standard double extortion strategy. In recent attacks, the group has employed a new custom-designed ransomware called “PolyVice,” which uses a strong encryption technique based on the NTRUEncrypt and ChaCha20-Poly1305 algorithms.