RansomExx is a ransomware group linked to Defray777, targeting the hospitality sector in Vietnam.
RansomExx is a ransomware group active since at least mid-2020, sharing technical commonalities with Defray777. This crime actor primarily targets companies within the Hospitality sector located in Vietnam. Their key TTPs involve deploying custom ransomware for data encryption, likely coupled with data exfiltration for double extortion. Defenders should focus on TTPs linked to Defray777, and strengthen network segmentation alongside ensuring robust offline backups, especially against ransomware attacks aimed at the hospitality industry.
RansomExx is a ransomware family that targeted multiple companies starting in mid-2020. It shares commonalities with Defray777.
RansomExx primarily targets companies within the Hospitality sector located in Vietnam.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.