Cyber Security Advisory issued by PTA against Ransomware gang ‘Rhysida’

The Pakistan Telecommunication Authority has issued an advisory to protect the users against the ransomware gang Rhysida.

The advisory issued to both government and public sector employees is to ensure they stay knowledgeable regarding the AI-driven cyber threats as Rhysida has caught the eye of cyber security professionals across the world.

One promising possibility to protect yourself against the AI-driven threats is to ensure we fight fire with fire and use AI tools such as WormGPT to keep ourselves safe.

Rhysida emerged in May 2023 and has been wreaking havoc since then. They’re a specialised group of people who inject trojans onto a system through various phishing tactics, hack the system, and then ask for ransom in exchange for the data.

Their targets are unknown and they’ve been targeting individuals from all sectors from healthcare, manufacturing, education, and IT etc.

Over the last few months, countless people fell victim to the brutal cyber attacks of Rhysida. The unidentified group of people that make up Rhysida have a special way through which they contact the victim.

Rhysida personnel after taking over a system give an Onion browser link called the Torr browser link. The Torr browser is not any ordinary browser like Google Chrome.

Torr Browsers are encrypted with onion layers that makes it extremely difficult, almost impossible to track the user with the continuous bounce of IP.

Rhysida gives a link to their Tor browser through which they make contact with the victim and ask for Ransom.

They also don’t take ransom in the form of cash or bank accounts. They ask the victim to buy cryptocurrency and send ransom in the form of crypto.