Pysa
Pysa is a ransomware group with a financial motive, tracked by Brandefense. It targets 6 sectors, including Government and Healthcare, in 3 countries, including the United States and the United Kingdom.
Also known as
- Mespinoza
- Pyza
- pysa Team
- Gold Burlap
- Cyborg Spider
- Techniques
- 0
- Exploited CVEs
- No CVE data
- First seen
- Oct 1, 2018
- Last seen
- Jan 6, 2022
- Record updated
Who They Target.
Sectors · 6
Countries · 3
Labelsdouble-extortioneducation-targetinghealthcare-targetinghistoricalpysa-partnersransomware
About Pysa.
Mespinosa is a ransomware which encrypts file using an asymmetric encryption and adds.pysa as file extension. According to dissectingmalware the extension "pysa" is probably derived from the Zanzibari Coin with the same name.
Last updated Oct 1, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.