PYSA has overtaken Conti as the top ransomware threat group for the month of November. It joined Lockbit, which has dominated the space since August.
PYSA increased its market share with a 50 percent rise in the number of targeted organizations. In previous incidents, cyber-actors exfiltrated employment records that contained personally identifiable information (PII), payroll tax information and other data that could be used to extort victims to pay a ransom,” the FBI warned.