Vice Society ransomware appends the .v-society extension when encrypting Linux machines. Running a leak site on the darkweb, Possible relations with "HelloKitty"
Uses multiple encryption tools including custom PolyVice
Deletes shadow copies
Exfiltrates data before encryption
PowerShell scripts for execution
Exploits internet-facing applications
Associated group: Vice Society