Medusa, operated by the Spearwing cybercrime group, emerged in 2023 as a ransomware-as-a-service (RaaS) platform. Affiliates deploy the malware in exchange for a share of ransom payments. Since its ...
Lazarus Group used Medusa ransomware in Middle East and U.S. healthcare attacks, with average $260,000 demands and 366 ...
North Korean state-backed hackers associated with the Lazarus threat group are targeting U.S. healthcare organizations in ...
Ransomware has traditionally been associated with financially motivated cybercriminal groups. Increasingly, however, state-aligned actors are blending espionage with disruptive ransomware tactics. New ...
New ransomware of choice, same critical targets North Korea’s Lazarus Group appears to have added another tool to its kit. It has begun using Medusa ransomware in extortion attacks targeting at least ...
In the past week, law enforcement agencies including the Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) have issued a warning about the ongoing ...
The North Korean threat group also leveraged Comebacker backdoor, Blindingcan RAT, and info stealer Infohook in its recent attacks.
Medusa Ransomware Strikes 300+ Targets: FBI & CISA Urge Immediate Action to #StopRansomware Your email has been sent Medusa ransomware now operates as a RaaS model, recruiting affiliates from criminal ...