Ransomware Group
PYSA
Also known as: Mespinoza
Status: active • First seen 2019-10 • 300+ known victims
PYSA specializes in attacking schools. They steal student and staff data for extortion.
Overview
PYSA is known for targeting K-12 schools and higher education institutions.
Target Industries
Education, Healthcare, Government
How They Attack
- • RDP exploitation
- • Phishing
- • Credential harvesting
Notable Victims
Multiple school districts, UK universities
Is your business exposed?
How to Protect Against PYSA
- 1.
Audit RDP access controls
MITRE ATT&CK Techniques
Is your business exposed?
Check if your company data is circulating on the dark web
Free scan • No credit card required