Daixin
Daixin Team is a ransomware and data extortion group active since at least June 2022, exclusively targeting the US Healthcare and Public Health sector by encrypting EHR and diagnostic systems and exfiltrating patient data to pressure victims into paying ransoms.
Victims
21
First Discovered
2022-08-03
victim
Last Discovered
2025-09-11
victim
Inactive Since
251
days
Avg Delay
N/A
attack→claim
Infostealer
71.4%
victims with domain
Countries
5
hit
Attack Velocity — Last 12 months
Known Locations (2)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | |
|---|---|---|---|---|---|---|---|
|
No | 2026-04-28T07:23:28 |
232fwh5cea3ub6qguz3pynijxfzl2uj3c73nbrayipf3gq25vtq2r4qd.onion
|
||||
|
Data Leak | No | 2026-05-19T23:49:45 |
7ukmkdtyxdkdivtjad57klqnd3kdsmq6tp45rrsxqnu76zzv3jvitlqd.onion
|
Target
Top 5 Activity Sectors
- Healthcare 7
- Business Services 3
- Financial Services 2
- Consumer Services 2
- Public Sector 2
Top 5 Countries
-
United States
14
-
United Arab Emirates
1
-
Canada
1
-
Indonesia
1
-
Malaysia
1
Heatmap
Tools Used
| Discovery | RMM Tools | Defense Evasion | Credential Theft | OffSec | Networking | LOLBAS | Exfiltration |
|---|---|---|---|---|---|---|---|
|
RClone
|
YARA Rules (1)
Victims (21)
Communicare, Inc. has been a premier provider of behavioral health services in Kentucky's heartland …
Insurance Office of America (IOA) is a premier, full-service insurance agency dedicated to deliverin…
Acadian Ambulance is an employee-owner private ambulance service that covers most of the state of Lo…
Dubai Municipality is the Government of Dubai municipal body with jurisdiction over city services an…
Omni Hotels & Resorts is an American privately held, international luxury hotel company based in Dal…
GSG digital printing technologies with a half a century of knowledge and experience in traditional s…
The North Texas Municipal Water District (NTMWD) provides vital wholesale water, wastewater and soli…
Bluewater Health is a hospital in Sarnia, Ontario. The hospital now encompasses about 600,000 …
Columbus Regional Healthcare System has one of the highest volume and most experienced robotic surgi…
Hit Promotional Products has been a leader in the promotional product industry. As a family-owned bu…
Guardian Analytics is now a part of NICE Actimize, a business of NICE (Nasdaq:NICE). Consistently ra…
PT Astra Daihatsu Motor is an automobile manufacturing company based in Jakarta, Indonesia. It is a …
AirAsia is a Malaysian multinational low-cost airline headquartered near Kuala Lumpur, Malaysia. It …
OakBend Medical is passionately focused on patient-centered medicine.OakBend Medical Center: 450 Ph…
ista International GmbH provides submetering and billing of water and energy consumption. The Compan…
Fitzgibbon Hospital is a leader in central Missouri in providing quality, compassionate care and per…
Trib Total Media delivers news, information and advertising to portions of Allegheny, Westmoreland, …