Rhysida
Rhysida is a ransomware group that appeared publicly in May 2023 and has, within roughly two years of operation, established itself as a significant threat to healthcare, education, government, and cultural institutions.
Last updated Apr 11, 2026
CLASSIFICATION: CONFIDENTIAL
This article requires CONFIDENTIAL clearance or higher.
What you need
Create a free Nexus ID to access CDA proprietary content including PDM domain explainers, methodology deep-dives, and reconnaissance mission briefings.
Create Nexus ID (Free)Sign in with Google, Microsoft, GitHub, or LinkedIn