Iran-Linked Pay2Key Ransomware Targeted US Healthcare Amidst Military Conflict A U.S. healthcare organization was targeted by the Iranian ransomware gang Pay2Key in late February, coinciding with military conflict. The attack suggests a motive beyond financial gain.

🇮🇷 Iran-linked Pay2Key ransomware hit a US healthcare org during recent military conflict. Unusually, no data was stolen, suggesting a disruptive, state-directed motive over financial gain. #Ransomware #Pay2Key #Iran #Healthcare #CyberWarfare

Pay2Key Linux Ransomware Analysis

~Morphisec~
Analysis of a Pay2Key Linux ransomware variant that uses root access to disable defenses and encrypt files via ChaCha20.
-
IOCs: Pay2Key. I2
-
#Linux #Pay2Key #Ransomware #ThreatIntel

Iranian-backed Pay2Key.I2P ransomware resurfaces, offering 80% profit share to affiliates targeting Western organizations. Over $4M in ransoms collected in 4 months. #CyberSecurity #Ransomware #Pay2Key Link: thedailytechfeed.com/iranian-back...

#Pay2Key is back?
2 samples:
6506697be2194a3ea76350eacf4e380c
65146db0c12a8e607dcc51d20a197546