logo

Open-Source Prince Ransomware Builder Used in Hospital Attack

ID: 589963fe-5a16-5a6a-9d0f-bd80b0426bcd

STIX ID: report--589963fe-5a16-5a6a-9d0f-bd80b0426bcd

Feed Name: Halcyon Blog

Threat Score
75/100

Date Published: 2025-04-07

Date Updated: 2026-04-28

...
...

In February 2025 MacKay Memorial Hospital in Taipei was hit by a ransomware attack attributed to "Crazyhunter" (Lo Chengyu), which encrypted data, delayed medical services, and led to attempts to sell stolen personal and medical records; Taiwan's CIB links the actor to 11 attacks against hospitals, schools, and listed companies. The report highlights the use of the open-source "Prince Ransomware" builder (ChaCha20 and ECIES), illustrating how readily available tooling enables even single individuals to conduct disruptive attacks and contributes to a shifting ransomware landscape.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.