Medusa ransomware is able to disable anti-malware tools, so be on your guard
Researchers spot Medusa ransomware operators deploying smuol.sys This driver mimics a legitimate CrowdStrike Falcon driver ...
The Hacker News5d
Hackers Repurpose RansomHub's EDRKillShifter in Medusa, BianLian, and Play Attacks
RansomHub's EDRKillShifter used in 2024 ransomware by Medusa, BianLian, and Play, revealing cross-gang tool sharing.
Ransomware crews add 'EDR killers' to their arsenal – and some aren't even malware
Not all EDR killers are malware. Talos incident responders came across one legitimate software tool called HRSword in a ...
CPO Magazine12d
Over 300 Critical Infrastructure Organizations Hit by Medusa Ransomware Attacks
The FBI, CISA, and MS-ISAC have issued a joint cybersecurity advisory on the Medusa ransomware attacks impacting over 300 ...
The Hacker News11d
Medusa Ransomware Uses Malicious Driver to Disable Anti-Malware with Stolen Certificates
Medusa ransomware uses ABYSSWORKER driver with stolen certificates to disable EDR and enable RDP access, risking data ...
it-daily.net5d
Medusa ransomware attacks escalating in 2025
Procedure of the Medusa hackers. The main route of infection for Medusa ransomware is targeted phishing campaigns.
Cybersecurity experts urge email users to take steps to guard against vicious ransomware scheme
A vicious ransomware called Medusa is picking up speed and a local cybersecurity expert has ways you can keep your data safe.
FBI warns of possible Outlook, Gmail cyberattacks
The FBI is warning users of popular email services such as Outlook and Gmail that they could be subject to cyberattacks by ...
Becker's Hospital Review7d
Feds warn healthcare of ‘double extortion’ ransomware threat
The FBI and other federal authorities are warning healthcare organizations to safeguard against a ransomware group targeting the industry. The Medusa ransomware-as-a-service variant has been used to ...
This dangerous new ransomware is hitting Windows, ARM, ESXi systems
A new dangerous ransomware variant has been spotted, capable of encrypting Windows devices, Linux, VMware, ESXi systems, and ...
Medusa ransomware using malicious driver as EDR killer
A Medusa ransomware campaign is using a malicious driver to disrupt and even delete endpoint detection and response (EDR) ...
NJ.com13d
FBI urges Gmail, Outlook users to be on high alert for ransomware scheme
The FBI and the U.S. Cybersecurity and Infrastructure Security Agency are urging Gmail, Outlook and users of other popular ...