MEDUSA RANSOMWARE HIT OVER 300 CRITICAL INFRASTRUCTURE ORGANIZATIONS UNTIL FEBRUARY 2025

Summary from the TLDR InfoSec newsletter

The Medusa ransomware targeted over 300 U.S. critical infrastructure organizations until February 2025, leading the FBI, CISA, and MS-ISAC to issue a joint advisory for network defenders. The ransomware developers recruited access brokers via cybercriminal forums and used techniques to evade detection, executing double extortion schemes that demanded payment for decrypting files and preventing data leaks.