TLDR InfoSec · MISCELLANEOUS

MEDUSA RANSOMWARE TURNING YOUR FILES INTO STONE

unit42.paloaltonetworks.com8 min read

Summary from the TLDR InfoSec newsletter

The Medusa ransomware group has increased attacks after launching a dark web leak site in February 2023 to publish data from victims refusing to comply with demands. The group's multi-extortion strategy offers victims options like extensions or data deletion for a price. Medusa emerged in 2022 and targets diverse sectors, impacting 74 organizations in 2023. Its attacks exploit internet-facing vulnerabilities and hijack accounts, often using initial access brokers for network access.