Procedure of the Medusa hackers. The main route of infection for Medusa ransomware is targeted phishing campaigns.

Operators of the Medusa ransomware are engaging in old-fashioned bring-your-own-vulnerable-driver (BYOD) attacks, bypassing ...

The Medusa ransomware relies on a malicious Windows driver to disable the security tools running on the infected systems.

Federal authorities have issued a new warning about a dangerous ransomware scheme that is sweeping across the country. It ...

ESET uncovers a link between RansomHub, Play, Medusa, and BianLian ransomware gangs as more groups adopt tools to disable EDR software.

RansomHub's EDRKillShifter used in 2024 ransomware by Medusa, BianLian, and Play, revealing cross-gang tool sharing.

A Russian-speaking ransomware group has been deploying a malicious Windows PE driver that imitates a legitimate CrowdStrike Falcon driver to bypass endpoint security, researchers warn. See Also: Expel ...