Open-Source Prince Ransomware Builder Used in Hospital Attack
ID: 589963fe-5a16-5a6a-9d0f-bd80b0426bcd
STIX ID: report--589963fe-5a16-5a6a-9d0f-bd80b0426bcd
Feed Name: Halcyon Blog
In February 2025 MacKay Memorial Hospital in Taipei was hit by a ransomware attack attributed to "Crazyhunter" (Lo Chengyu), which encrypted data, delayed medical services, and led to attempts to sell stolen personal and medical records; Taiwan's CIB links the actor to 11 attacks against hospitals, schools, and listed companies. The report highlights the use of the open-source "Prince Ransomware" builder (ChaCha20 and ECIES), illustrating how readily available tooling enables even single individuals to conduct disruptive attacks and contributes to a shifting ransomware landscape.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
