Daixin Team

A financially motivated ransomware and data-extortion group active since at least 2022 and strongly focused on healthcare and public-health organizations. It gains access through vulnerable VPNs or compromised credentials, steals patient and operational data, and deploys ransomware to encrypt servers.