pysa
Activity analysis
HackerFeeds has tracked 309 victims claimed by pysa since July 2020, most recently in September 2022 — ranking #24 of 332 groups (0.9% of all tracked ransomware victims). No new victims have been posted in the last 180 days; the most recent claim was in September 2022. Its most-targeted sector is Education (50 victims), followed by Business Services (38). Canada accounts for 2 victims (40% of those with a known location); 304 victims did not disclose a location.
Victims per year
- 20203
- 2021305
- 20221
Top sectors
- Education50
- Business Services38
- Healthcare32
- Manufacturing29
- Transportation/Logistics17
- Public Sector16
Top countries
Computed from victims claimed on the group's leak site as collected by HackerFeeds; claims are not independently verified. Monthly reports · Methodology
Group profile
Mespinosa is a ransomware which encrypts file using an asymmetric encryption and adds .pysa as file extension. According to dissectingmalware the extension "pysa" is probably derived from the Zanzibari Coin with the same name.
Recent victims
No victims tracked yet.