Skip to content
brandefense.io
Request A Demo
RansomwareFinancialModerate sophistication · Small team

Vice Society

Vice Society is a ransomware group with a financial motive, tracked by Brandefense. It targets 5 sectors, including Government and Healthcare, in 20 countries, including the United States and the United Kingdom. It uses 5 MITRE ATT&CK techniques.

Also known as
  • DEV-0832
  • VICE SPIDER
  • vicesociety Team
Request IOC feedRequest ATT&CK export
Techniques
5
Exploited CVEs
No CVE data
First seen
Jun 1, 2021
Last seen
Jan 24, 2023
Record updated

Who They Target.

Sectors · 5
Countries · 20
Labelsdouble-extortioneducation-targetinghealthcare-targetinghello-kittyransomwarezeppelin

About Vice Society.

Vice Society is a ransomware and extortion group that emerged in summer 2021 and disproportionately targeted the education sector. The FBI, CISA, and MS-ISAC advisory states that Vice Society is an intrusion, exfiltration, and extortion hacking group that did not use a ransomware variant of unique origin, instead deploying variants such as Hello Kitty/Five Hands and Zeppelin. Treat recent status as dormant/historical unless internal CTI confirms post-2023 activity.

Last updated Sep 30, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.