The FBI has issued a warning about the Medusa ransomware, a type of ransomware-as-a-service that has impacted over 300 victims since its 2021 discovery. This malware infiltrates systems typically through phishing or unpatched vulnerabilities, leading to demands for ransom from the victims. The syndicate behind Medusa might employ individuals to breach accounts, with ransoms varying significantly. The FBI's advisory explains that victims may face multiple demands for payment, illustrating the repeated threats from this type of cybercrime. Best practices for protecting data include strong passwords, multi-factor authentication, and regular backups.
The malicious actors will demand a ransom for victims to obtain their data and prevent it from being released, asking that the victim "make contact within 48 hours."
In order to protect themselves, people can follow the agencies' tips and tricks for securing accounts and personal information to prevent data theft.
Medusa has affected more than 300 known people from a variety of critical infrastructure sectors since it was first discovered in 2021.
As advised by the FBI, a victim was triple extorted in one case, where they were contacted by another Medusa-related cybercriminal demanding another payment.
Collection
[
|
...
]