Last Week in Ransomware: 11.27.23

This report summarizes recent ransomware activity including joint FBI/CISA advisories on Rhysida and Royal operations, describing tactics such as credential abuse of VPNs, living-off-the-land techniques, use of Cobalt Strike and PSExec, VSS wiping, and double-extortion data leaks; it also details widespread impacts on healthcare (over 52 million patient records affected and substantial financial losses) and lists notable victims and ransom demands.