😷 Medusa ransomware has affected more than 300 critical organizations, FBI warns

[chushpan]

Medusa ransomware has affected more than 300 victims in critical infrastructure sectors since it was first discovered in June 2021, the FBI and the Cybersecurity and Infrastructure Security Agency (CISA) warn.

The agencies have issued a joint advisory warning about Medusa actors and ways to protect against them.

🗞 Medusa is a ransomware-as-a-service that uses common techniques such as phishing campaigns and exploiting vulnerabilities in unpatched software.

As of February 2025, its developers and affiliates “have impacted more than 300 victims across multiple critical infrastructure sectors, including healthcare, education, legal, insurance, technology, and manufacturing”, CISA said in a statement.

The total number of victims is even higher. Since the beginning of 2023, the group has listed nearly 400 organizations on a data breach site, and the true number is likely much higher, the Symantec Threat Hunter Team reported a week ago.