Vice Society: A Double Extortion Ransomware Group

Vice Society is a financially motivated ransomware group conducting human-operated double-extortion campaigns against primarily small and mid-sized organizations—particularly in education and healthcare—using purchased ransomware families (Zeppelin for Windows, HelloKitty for Linux), exploiting public vulnerabilities like PrintNightmare, and maintaining a data leak site listing victims and publishing mocking messages; the report includes observed IoCs and YARA references.