#medusa


CISA: Medusa ransomware hit over 500 critical infrastructure orgs

Aug 19, 2026 // 11:17

The Cybersecurity and Infrastructure Security Agency (CISA) said Tuesday that the Medusa ransomware gang has breached more than 500 critical infrastructure organizations in the United […]

New StormEncryptor ransomware used by former Medusa affiliate

Aug 10, 2026 // 20:57

A financially motivated threat actor previously associated with the Medusa ransomware operation is now deploying a new ransomware strain called StormEncryptor. Microsoft Threat Intelligence is […]

Chinese group Storm-1175 swiftly uses unknown flaws to spread Medusa ransomware.

Apr 7, 2026 // 09:39

A Chinese cyber threat group known for using Medusa ransomware has been found to be exploiting both new and recently patched vulnerabilities in order to […]

Microsoft connects Medusa ransomware group’s affiliate to zero-day exploits.

Apr 6, 2026 // 19:57

According to Microsoft, Storm-1175, a Chinese financially motivated cybercriminal group known for using Medusa ransomware, is rapidly exploiting both known (n-day) and previously unknown (zero-day) […]

North Korean State Hackers Now Deploying Medusa Ransomware

Feb 24, 2026 // 14:34

Security researchers have linked the North Korean state-backed Lazarus Group—specifically its subgroup Andariel (also known as Stonefly) —to a series of extortion attacks using Medusa ransomware. This marks the first […]