Rhysida
In 6 briefs, most recently 1 September 2026. RSS for this tag
Learn more: Malpedia ↗ ThreatFox ↗ MalwareBazaar ↗
Coverage in DanSec Daily
- Berlin city data theft by Rhysida, McKesson breach claimed by ShinyHunters, and Cronos restart after $74M Tectonic exploit.
- McKesson breach claimed by ShinyHunters (284M records), Berlin city ransomware by Rhysida, and ServiceNow critical code injection patches.
- ShinyHunters leaks 13.5M McGraw Hill accounts, Rhysida ransomware breach hits 337,000 patients, and Windows zero-days are actively exploited.
- Envoy Air's Oracle EBS data theft claimed by Clop, Prosper's breach of 17.6 million accounts, and Zendesk email bombing.
- F5 breach tied to Chinese actors, Prosper breach hitting 17.6M accounts, and Cisco IOS flaw exploited to deploy Linux rootkits.
- TeleMessage's breach and suspended services, the Darcula SMS phishing platform stealing 884,000 cards, and UK retail attacks prompting new NCSC guidance.