← Threat Actors / Global / Vanilla Tempest
DOSSIER // VANILLA-TEMPEST

Vanilla Tempest

▲ High Threat
Primary Aliases: DEV-0832 Vice Society
Sponsor / State Affiliation Independent / Not Attributed
Primary Motivation Espionage / Financial
Active Timeline Unknown – Present
Confidence Rating 70% (Grounded)

Vice Society is a ransomware group that has been active since at least June 2021. They primarily target the education and healthcare sectors, but have also been observed targeting the manufacturing industry. The group has used multiple ransomware families and has been known to utilize PowerShell scripts for their attacks. There are similarities between Vice Society and the Rhysida ransomware group, suggesting a potential connection or rebranding.

⚔️ Weaponized CVE Matrix (0)

No specific weaponized CVEs currently mapped in the public baseline.

🎯 Target Sectors & Focus

Defense & Aerospace Government & Diplomacy Financial & Crypto Critical Infrastructure

🛡️ MITRE ATT&CK® Attack Lifecycle (0 TTPs)

📥 Download Navigator JSON
No tactical TTP mapping records recorded in database.
Copied to clipboard

LINK COPIED TO CLIPBOARD