The Medusa ransomware relies on a malicious Windows driver to disable the security tools running on the infected systems.

Federal authorities have issued an advisory warning people of Medusa ransomware that has breached the data of more than 300 ...

Medusa ransomware now operates as a RaaS model, recruiting affiliates from criminal forums to launch attacks, encrypt data, ...

Researchers spot Medusa ransomware operators deploying smuol.sys This driver mimics a legitimate CrowdStrike Falcon driver ...

Medusa ransomware uses ABYSSWORKER driver with stolen certificates to disable EDR and enable RDP access, risking data ...

Federal authorities have issued a new warning about a dangerous ransomware scheme that is sweeping across the country. It ...

Law enforcement agencies including the FBI and CISA have issued a warning about the ongoing threat of Medusa ransomware.

CISA says the Medusa ransomware operation has impacted over 300 organizations in critical infrastructure sectors in the ...

Medusa developers and affiliates, also known as Medusa actors, use double extortion to encode victim data and threaten to ...

Government officials sounded the alarm over the growing threat of ransomware attacks. The FBI and U.S. Cybersecurity and ...

The FBI, CISA, and MS-ISAC have issued a joint cybersecurity advisory on the Medusa ransomware attacks impacting over 300 ...