Pysa/Mespinoza Inactive
Heavily targeted education and healthcare. Uses manual hacking rather than automated deployment. Known for thorough data exfiltration.212
Total Victims
2019-10-01
First Seen
2022-05-27
Last Seen
16
Known TTPs
1.1d
Avg Delay
12
Negotiations
ONION URLS
pysa2bitc5ldeyfak4seeruqymqs4sj5wt5qkcq7aoyg4h2acqieywad.onion
http://pysa2bitc5ldeyfak4seeruqymqs4sj5wt5qkcq7aoyg4h2acqieywad.onion/partners.html
TOOLS
Meterpreter
Mimikatz
TDSSKiller
FILE EXTENSIONS
.dark
ACTIVITY TIMELINE
TOP SECTORS
TOP COUNTRIES
ACTIVITY HEATMAP
| Date | Victim Name | Country | Sector | Status |
|---|---|---|---|---|
| 2022-05-27 | FirstSecurity | United States | Construction | Published |
| 2022-05-19 | Solid Sports LLC | Portugal | Financial Services | Published |
| 2022-05-12 | Keystone Net LLC | Singapore | Healthcare | Published |
| 2022-05-11 | West Products LLC | United States | Manufacturing | Published |
| 2022-05-11 | CityCloud | Greece | Manufacturing | Published |
| 2022-05-09 | Sky IT | United States | Food & Beverage | Removed |
| 2022-05-04 | UniversalCast | Chile | Manufacturing | Published |
| 2022-04-22 | Maple Cast Ltd | Slovenia | Pharmaceuticals | Published |
| 2022-04-20 | Smart & Excel Tech | United States | Professional Services | Published |
| 2022-04-11 | Platinum Pharma Ltd | Canada | Real Estate | Published |
| 2022-03-28 | Solid & Solid Bank | United States | Manufacturing | Published |
| 2022-03-26 | Omni Life Ltd | Türkiye | Hospitality | Removed |
| 2022-03-23 | Iron Bridge GmbH | Indonesia | Healthcare | Removed |
| 2022-03-22 | Zenith Supply | Brazil | Education | Published |
| 2022-03-20 | Smart Force LLC | United Kingdom | Technology | Negotiating |
| 2022-03-20 | Sovereign Hospital Inc. | Austria | Manufacturing | Removed |
| 2022-03-18 | Zenith Web Ltd | Australia | Healthcare | Published |
| 2022-03-08 | Frontier Pro Inc. | India | Media & Entertainment | Published |
| 2022-03-07 | Progressive Auto LLC | New Zealand | Healthcare | Published |
| 2022-03-04 | Strategic Hospital LLC | Australia | Manufacturing | Published |
| 2022-03-03 | Nordic Hospitality LLC | Hungary | Financial Services | Published |
| 2022-03-03 | Shield Clinic | Australia | Food & Beverage | Published |
| 2022-03-03 | Universal Path | Germany | Retail | Published |
| 2022-03-01 | Federal Homes LLC | United States | Healthcare | Published |
| 2022-02-28 | Navigator Build | Venezuela, Bolivarian Republic of | Telecommunications | Published |
| 2022-02-28 | Wind Group | Australia | Transportation | Removed |
| 2022-02-26 | Liberty Metals GmbH | United States | Education | Removed |
| 2022-02-24 | Bay Web LLC | Canada | Mining | Published |
| 2022-02-21 | Peak Clinic GmbH | Malaysia | Technology | Published |
| 2022-02-10 | SterlingBank | Germany | Financial Services | Published |
| 2022-02-05 | Swift Comm LLC | United States | Retail | Published |
| 2022-02-05 | GoldenWare | United States | Financial Services | Published |
| 2022-02-03 | Cross Robotics Ltd | France | Healthcare | Published |
| 2022-02-01 | Inland Intel | Portugal | Technology | Published |
| 2022-01-23 | Star Path Ltd | New Zealand | Automotive | Published |
| 2022-01-08 | United & Navigator Enterprises | United Kingdom | Food & Beverage | Published |
| 2022-01-03 | Horizon Studios GmbH | United States | Construction | Removed |
| 2021-12-28 | Mid Homes GmbH | Switzerland | Telecommunications | Published |
| 2021-12-27 | United Services Inc. | Estonia | Manufacturing | Published |
| 2021-12-26 | Rock Foods | Puerto Rico | Healthcare | Removed |
| 2021-12-24 | Genesis Ship Inc. | Singapore | Education | Published |
| 2021-12-19 | Royal & Platinum Dental | Germany | Automotive | Published |
| 2021-12-14 | Oak Land Ltd | United States | Government | Published |
| 2021-12-10 | Imperial Wire Inc. | United States | Manufacturing | Published |
| 2021-12-01 | South Bank LLC | Canada | Real Estate | Published |
| 2021-12-01 | Rock Technologies Ltd | Bulgaria | Mining | Published |
| 2021-11-27 | Excel Metals Inc. | Australia | Education | Published |
| 2021-11-26 | Pacific Marine GmbH | United States | Hospitality | Removed |
| 2021-11-17 | Frontier Finance Ltd | Singapore | Technology | Removed |
| 2021-11-11 | Federal & Noble Dynamics | United States | Education | Published |
| 2021-11-07 | Empire Manufacturing | Portugal | Healthcare | Published |
| 2021-10-17 | Sovereign Legal GmbH | United States | Construction | Published |
| 2021-10-14 | Mountain & Crown Rail | United Kingdom | Financial Services | Removed |
| 2021-10-12 | Excel Properties | United States | Education | Published |
| 2021-10-05 | Heritage & Shield Legal | Japan | Government | Published |
| 2021-09-27 | Prime Land | Saudi Arabia | Technology | Negotiating |
| 2021-09-25 | Solid Net Inc. | Canada | Professional Services | Published |
| 2021-09-16 | Onyx Land Ltd | United States | Healthcare | Published |
| 2021-09-09 | Excel Hospitality LLC | United States | Technology | Published |
| 2021-09-08 | Harbor Group Ltd | United States | Aerospace & Defense | Published |
| 2021-09-01 | Venture Space LLC | South Africa | Healthcare | Published |
| 2021-08-28 | StrategicCorp | New Zealand | Financial Services | Removed |
| 2021-08-27 | GenesisMedia | Canada | Aerospace & Defense | Removed |
| 2021-08-27 | Keystone Energy Ltd | Saudi Arabia | Healthcare | Published |
| 2021-08-19 | Phoenix Financial Inc. | New Zealand | Legal | Published |
| 2021-08-17 | Union Materials GmbH | United States | Technology | Published |
| 2021-08-12 | Smart Dev Ltd | India | Healthcare | Published |
| 2021-08-03 | White Bank LLC | Belgium | Logistics | Removed |
| 2021-07-17 | United Health GmbH | Germany | Telecommunications | Published |
| 2021-07-11 | Premier Media | Saudi Arabia | Financial Services | Published |
| 2021-07-11 | Pulse Dev Inc. | United States | Education | Published |
| 2021-07-08 | Sovereign Security LLC | United Kingdom | Construction | Published |
| 2021-07-08 | Zenith Insurance GmbH | Mexico | Healthcare | Published |
| 2021-07-05 | Apex Risk LLC | United States | Insurance | Removed |
| 2021-07-03 | StrategicResources | Slovakia | Healthcare | Published |
| 2021-06-27 | Liberty Systems GmbH | United States | Manufacturing | Published |
| 2021-06-27 | National Mobile | United States | Mining | Negotiating |
| 2021-06-22 | Premier Hospitality | Japan | Retail | Published |
| 2021-06-22 | Sage & Oak Water | United States | Manufacturing | Published |
| 2021-06-19 | SpectrumMotors | United States | Logistics | Published |
| 2021-06-18 | Valley Medical | United States | Healthcare | Published |
| 2021-06-16 | Meridian Chem Ltd | United States | Retail | Negotiating |
| 2021-06-16 | Stone Print GmbH | United States | Transportation | Published |
| 2021-06-14 | RoyalManagement | Australia | Manufacturing | Published |
| 2021-06-12 | Heritage Gen GmbH | New Zealand | Financial Services | Negotiating |
| 2021-05-28 | Liberty Consulting GmbH | United Kingdom | Healthcare | Published |
| 2021-05-26 | Tower Wave GmbH | United States | Government | Published |
| 2021-05-21 | Trans Info Inc. | United States | Telecommunications | Published |
| 2021-05-16 | Green Ventures Inc. | Australia | Technology | Removed |
| 2021-05-14 | Key Manufacturing GmbH | Portugal | Manufacturing | Removed |
| 2021-05-07 | Legacy Wellness LLC | United States | Real Estate | Published |
| 2021-05-07 | MountainOil | Germany | Technology | Removed |
| 2021-05-06 | Prairie Oil Ltd | Chile | Energy | Removed |
| 2021-05-02 | East & Tri Transport | Estonia | Manufacturing | Published |
| 2021-04-22 | Vista Auto Inc. | Venezuela, Bolivarian Republic of | Government | Published |
| 2021-04-13 | Heritage Mechanical LLC | Canada | Professional Services | Published |
| 2021-04-13 | Grand Health GmbH | Saudi Arabia | Technology | Published |
| 2021-04-02 | SpectrumGroup | Mexico | Insurance | Published |
| 2021-03-27 | Heritage & Riverside Security | Saudi Arabia | Manufacturing | Published |
| 2021-03-22 | Grand Ware | United States | Manufacturing | Published |
| 2021-03-21 | Spectrum & Delta Materials | Colombia | Government | Published |
| 2021-03-16 | Diamond Bank Ltd | Venezuela, Bolivarian Republic of | Manufacturing | Published |
| 2021-03-08 | Star Steel Inc. | Philippines | Technology | Published |
| 2021-03-04 | New Enterprises Inc. | United Kingdom | Manufacturing | Removed |
| 2021-02-13 | Patriot & Solid Cast | United States | Education | Removed |
| 2021-02-09 | Vanguard Data Ltd | Brazil | Technology | Published |
| 2021-01-19 | Zenith Integrated LLC | Portugal | Manufacturing | Removed |
| 2021-01-17 | Atlas Cast | United States | Manufacturing | Published |
| 2021-01-13 | Excel Technologies GmbH | United States | Energy | Removed |
| 2021-01-10 | Apex Logistics Ltd | United States | Construction | Published |
| 2021-01-07 | Continental Web GmbH | France | Manufacturing | Published |
| 2021-01-07 | Phoenix & Mountain Motors | Estonia | Manufacturing | Published |
| 2021-01-06 | Vanguard Data | United Arab Emirates | Technology | Published |
| 2021-01-03 | SterlingSpace | Peru | Hospitality | Published |
| 2020-12-28 | Prime Operations Ltd | Germany | Real Estate | Published |
| 2020-12-26 | Sky Build | Canada | Automotive | Removed |
| 2020-12-26 | National Media Ltd | Venezuela, Bolivarian Republic of | Mining | Published |
| 2020-12-20 | Magna Freight Ltd | Taiwan, Province of China | Professional Services | Published |
| 2020-12-18 | True Design Ltd | United States | Manufacturing | Published |
| 2020-12-17 | Vital Ware GmbH | Japan | Manufacturing | Published |
| 2020-12-10 | Ultra Mechanical GmbH | United Kingdom | Utilities | Removed |
| 2020-12-10 | Iron Associates Ltd | Latvia | Government | Published |
| 2020-12-09 | Omni Aero Inc. | Germany | Food & Beverage | Removed |
| 2020-12-07 | Federal Resources | Malaysia | Legal | Negotiating |
| 2020-11-28 | Highland Intel Ltd | India | Retail | Published |
| 2020-11-24 | Modern Ventures Inc. | Korea, Republic of | Energy | Published |
| 2020-11-12 | Legacy Logistics LLC | Colombia | Technology | Published |
| 2020-11-05 | Sierra Mining Ltd | United States | Professional Services | Published |
| 2020-11-03 | First Print LLC | United States | Professional Services | Published |
| 2020-10-24 | North Mining Ltd | Germany | Healthcare | Published |
| 2020-10-21 | Bay Bank | United States | Media & Entertainment | Published |
| 2020-10-15 | Solar Consulting GmbH | United States | Financial Services | Removed |
| 2020-10-08 | National & Diamond Holdings | Latvia | Professional Services | Published |
| 2020-10-08 | Baader Bank | Germany | Financial Services | Published |
| 2020-10-02 | Bay & Navigator Net | United States | Healthcare | Published |
| 2020-09-25 | TitanRobotics | Brazil | Retail | Removed |
| 2020-09-22 | HorizonTherapeutics | Italy | Food & Beverage | Published |
| 2020-09-19 | Liberty Networks LLC | Canada | Pharmaceuticals | Published |
| 2020-09-17 | Orange Innovation | Spain | Telecommunications | Published |
| 2020-09-09 | Synergy Trade GmbH | United States | Retail | Published |
| 2020-09-08 | Ridge Tech Inc. | France | Financial Services | Published |
| 2020-09-06 | Pro & Grand Connect | Argentina | Real Estate | Removed |
| 2020-08-19 | NordicGroup | Japan | Education | Published |
| 2020-08-16 | Peak & Golden Services | Germany | Education | Published |
| 2020-08-14 | Noble Electronics | United States | Education | Published |
| 2020-08-11 | Lone Star Intel LLC | United Kingdom | Professional Services | Published |
| 2020-08-06 | Horizon Realty GmbH | United Kingdom | Legal | Published |
| 2020-08-01 | Diamond Risk GmbH | United Kingdom | Retail | Published |
| 2020-08-01 | Diamond Aero | United States | Energy | Removed |
| 2020-07-28 | Modern Telecom LLC | Panama | Government | Removed |
| 2020-07-26 | Prime Electric GmbH | Saudi Arabia | Utilities | Published |
| 2020-07-24 | Union Hospital | Malaysia | Healthcare | Published |
| 2020-07-22 | TriServices | Brazil | Construction | Published |
| 2020-07-17 | Western & Southern Comm | Philippines | Government | Removed |
| 2020-07-16 | Blue Defense | Canada | Technology | Published |
| 2020-07-13 | Cross Medical GmbH | United Arab Emirates | Construction | Published |
| 2020-07-12 | Blue Properties Inc. | United States | Government | Negotiating |
| 2020-07-01 | Progressive & Sun Health | United Kingdom | Financial Services | Removed |
| 2020-07-01 | Phoenix Med | Czechia | Education | Published |
| 2020-06-24 | CityPackaging | United States | Construction | Published |
| 2020-06-17 | Western Med LLC | Costa Rica | Healthcare | Removed |
| 2020-06-16 | Diamond Farm LLC | United States | Financial Services | Published |
| 2020-06-16 | Smart & Atlas Fund | United States | Retail | Published |
| 2020-06-15 | Superior & Titan Gen | United States | Retail | Published |
| 2020-06-07 | National & Eagle Logistics | India | Financial Services | Removed |
| 2020-06-06 | Sierra Industries | United Kingdom | Utilities | Published |
| 2020-06-05 | Vista Mining | United States | Technology | Published |
| 2020-06-05 | Sky Consulting | United States | Manufacturing | Published |
| 2020-05-26 | Global Logistics Ltd | Germany | Telecommunications | Published |
| 2020-05-26 | Meridian Services Inc. | Costa Rica | Education | Published |
| 2020-05-12 | Imperial Risk Ltd | Spain | Professional Services | Removed |
| 2020-05-09 | Infinity & Blue Technologies | Brazil | Technology | Removed |
| 2020-05-04 | Innovative Services Inc. | Slovakia | Professional Services | Published |
| 2020-05-01 | Silver & Lake Wave | Germany | Manufacturing | Removed |
| 2020-04-27 | National & Sterling Corp | United States | Transportation | Negotiating |
| 2020-04-27 | Progressive Aero LLC | Netherlands | Government | Negotiating |
| 2020-04-24 | Empire Care LLC | France | Healthcare | Removed |
| 2020-04-05 | Onyx Path Ltd | Luxembourg | Energy | Published |
| 2020-03-26 | Solid World GmbH | Australia | Healthcare | Published |
| 2020-03-26 | North Services Inc. | Greece | Logistics | Published |
| 2020-03-24 | Willow Realty Ltd | Colombia | Technology | Published |
| 2020-03-17 | Peninsula Steel GmbH | Guatemala | Legal | Published |
| 2020-02-28 | First Force LLC | Netherlands | Hospitality | Removed |
| 2020-02-20 | Global Pharma GmbH | Germany | Hospitality | Published |
| 2020-02-07 | CrossGroup | United States | Education | Published |
| 2020-02-07 | SwiftNet | Luxembourg | Government | Published |
| 2020-02-03 | Sovereign Enterprises GmbH | United States | Technology | Removed |
| 2020-01-26 | Green Sports Inc. | Germany | Utilities | Published |
| 2020-01-20 | LakeIntegrated | Argentina | Manufacturing | Published |
| 2020-01-12 | Nordic Clinic LLC | Czechia | Real Estate | Published |
| 2020-01-04 | Prime Systems | Slovakia | Legal | Removed |
| 2020-01-02 | Trust & Green Design | Türkiye | Professional Services | Published |
| 2019-12-26 | Tri Consulting Ltd | United States | Manufacturing | Published |
| 2019-12-26 | Continental Defense Inc. | United States | Education | Removed |
| 2019-12-10 | Prime Vision GmbH | Slovakia | Media & Entertainment | Published |
| 2019-12-07 | Lake Engineering Ltd | Ecuador | Retail | Published |
| 2019-12-07 | Nordic Corp Inc. | Argentina | Professional Services | Published |
| 2019-12-05 | Sun Cloud LLC | United States | Professional Services | Published |
| 2019-11-28 | Pacific Labs LLC | United States | Energy | Published |
| 2019-11-27 | First Ware Inc. | Malaysia | Legal | Published |
| 2019-11-23 | River Care Ltd | United States | Technology | Removed |
| 2019-11-16 | Delta Materials LLC | Saudi Arabia | Manufacturing | Published |
| 2019-11-13 | Nova Operations GmbH | France | Manufacturing | Removed |
| 2019-11-11 | Cross & Cross Wellness | Costa Rica | Retail | Published |
| 2019-11-08 | ODDO BHF | Germany | Financial Services | Published |
| 2019-11-05 | Shield Dev GmbH | United States | Manufacturing | Removed |
| 2019-11-03 | Phoenix Net | Peru | Construction | Published |
| 2019-10-25 | Great Freight LLC | Sweden | Professional Services | Published |
| 2019-10-17 | Frontier Homes GmbH | United States | Agriculture | Published |
| 2019-10-12 | Northwest Media Ltd | India | Real Estate | Published |
| 2019-10-12 | ImperialFoods | Spain | Hospitality | Published |
| 2019-10-06 | Onyx Defense Ltd | United Kingdom | Pharmaceuticals | Published |
| Technique ID | Technique Name | Tactic |
|---|---|---|
| T1003.001 | LSASS Memory | credential-access |
| T1110 | Brute Force | credential-access |
| T1552.001 | Credentials In Files | credential-access |
| T1036.005 | Match Legitimate Resource Name or Location | defense-evasion |
| T1070.004 | File Deletion | defense-evasion |
| T1562.001 | Disable or Modify Tools | defense-evasion |
| T1112 | Modify Registry | defense-evasion, persistence |
| T1016 | System Network Configuration Discovery | discovery |
| T1046 | Network Service Discovery | discovery |
| T1059.001 | PowerShell | execution |
| T1059.006 | Python | execution |
| T1569.002 | Service Execution | execution |
| T1486 | Data Encrypted for Impact | impact |
| T1489 | Service Stop | impact |
| T1490 | Inhibit System Recovery | impact |
| T1021.001 | Remote Desktop Protocol | lateral-movement |
No YARA rules
No IoCs
No ransom notes