Skip to content
brandefense.io
Request A Demo
RansomwareFinancialModerate sophistication · Organisation

Daixin

Daixin is a ransomware group with a financial motive, tracked by Brandefense. It targets 9 sectors, including Government and Technology, in 5 countries, including the United States and Canada. It uses 11 MITRE ATT&CK techniques.

Also known as
  • Daixin Team
Request IOC feedRequest ATT&CK export
Techniques
11
Exploited CVEs
No CVE data
First seen
Jun 1, 2022
Last seen
Apr 15, 2024
Record updated

Who They Target.

Sectors · 9
Countries · 5
Labelsbabuk-lineageclaimed-2024-activitydaixindata-extortionhealthcare-targetingngrokransomwarerclonevpn-access

About Daixin.

Daixin Team is a ransomware and data extortion group active since at least June 2022, exclusively targeting the US Healthcare and Public Health sector by encrypting EHR and diagnostic systems and exfiltrating patient data to pressure victims into paying ransoms.

Last updated Oct 1, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.