Malware
Medusa
- First Reported
- Aug 25, 2026
- Latest Reported
- Sep 8, 2026
Reported Context (3)
- We zoomed into five of them—LockBit, Cl0p, Akira, Medusa, and Qilin—in a bid to know more about their network IoCs and identify new artifacts. DNS Analysis Maps Infrastructure Linked to Five Ransomware Groups
- Ten CVEs were associated with the group’s use of Mimikatz, Impacket, PsExec, Rclone, and Medusa ransomware. Recorded Future Reports 215 Actively Exploited CVEs and Expanding Supply-Chain Threats in H1 2026
- The FBI and CISA also issued joint warnings regarding Medusa ransomware, including the use of AI to streamline intrusion, escalate privileges, and evade detection. Cyble Explains How Organizations Can Quantify Cyber Risk in Financial Terms
CVE (8)
Malware (56)
Threat Actors (21)
MITRE ATT&CK (13)
Vendors (26)
Products (59)
Tools (21)
Industries (14)
Countries (12)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.