Stop Ransomware: Daixin Team

The Federal Bureau of Investigation ( FBI), Cybersecurity and Infrastructure Security Agency (CISA), and Department of Health and Human Services (HHS) released this joint Cybersecurity Advisory (CSA) to provide information on the “Daixin Team,” a cybercrime group that is actively targeting U.S. businesses, primarily in the Healthcare and Public Health (HPH) Sector, with ransomware and data extortion operations.

This joint CSA provides Daixin actors’ TTPs and IOCs gleaned from FBI threat response activities and third-party reporting.