The PYSA ransomware is a variant of the Mespinoza ransomware. It’s been used in targeted attacks against large private organizations, healthcare, and most recently, the education sector. Threat actors explicitly call their victim organizations Partners. They have also hit government groups across multiple continents. The FBI has issued a warning of increased attacks from the threat actors behind the PySA ransomware. We are not sure if we can detect the attack as well as the threat actor.”]
Source: https://blog.malwarebytes.com/threat-spotlight/2021/03/pysa-the-ransomware-attacking-schools/