TLDR InfoSec · MISCELLANEOUS
MEDUSA RANSOMWARE TURNING YOUR FILES INTO STONE
Summary from the TLDR InfoSec newsletter
The Medusa ransomware group has increased attacks after launching a dark web leak site in February 2023 to publish data from victims refusing to comply with demands. The group's multi-extortion strategy offers victims options like extensions or data deletion for a price. Medusa emerged in 2022 and targets diverse sectors, impacting 74 organizations in 2023. Its attacks exploit internet-facing vulnerabilities and hijack accounts, often using initial access brokers for network access.