TF-MAL-js.mega_medusa
📛 Threat Title
Malware family: megaMedusa
Description
ThreatFox malware family `js.mega_medusa`. Printable name: megaMedusa.
Indicators of Compromise (0)
No indicators of compromise on this threat.
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:dailysecurityreview.com
Medusa ransomware attacks hit over 300 critical infrastructure orgs in the US. CISA, FBI, and MS-ISAC issue a joint advisory with mitigation recommendations. Learn more.
-
web:dl.acm.org
Medusa is a growing threat in the world of malware because of its use of a double extortion tactic. The attackers are provided with additional leverage for blackmail given that the malware steals sensitive data before encrypting. Then it proceeds to spread through phishing emails and capitalizes on software vulnerabilities.
-
web:executivegov.com
Find out the recommended mitigation steps to counter the Medusa ransomware that CISA and its partners released in a joint advisory.
-
web:medium.com
One of the latest threats, Medusa ransomware, has adopted a highly advanced method: leveraging a malicious driver signed with a stolen certificate to disable anti- malware solutions before ...
-
web:www.adaptivesecurity.com
As Medusa Ransomware attacks increase, the FBI and CISA have released a cybersecurity advisory warning that over 300 organizations have been impacted.
-
web:www.armis.com
It details Medusa's tactics, techniques, and procedures (TTPs), indicators of compromise (IOCs), and mitigation strategies to assist organizations in defending against this evolving ransomware threat. Overview of Medusa Ransomware Medusa ransomware was first identified in June 2021, operating as a Ransomware-as-a-Service (RaaS) model.
-
web:www.cisa.gov
The Medusa ransomware variant is unrelated to the MedusaLocker variant and the Medusa mobile malware variant per the FBI's investigation. FBI, CISA, and MS-ISAC encourage organizations to implement the recommendations in the Mitigations section of this advisory to reduce the likelihood and impact of Medusa ransomware incidents.
-
web:www.dactaglobal.com
Explore DACTA's in-depth report on Medusa Ransomware, analyzing its mechanisms, impact, and mitigation strategies alongside insights into Advanced Persistent Threat groups.
-
web:www.dataprivacyandsecurityinsider.com
On March 12, 2025, a joint cybersecurity advisory was issued by the Cybersecurity and Infrastructure Security Agency, the Federal Bureau of Investigation, and the Multi-State Information Sharing and Analysis Center to advise companies about the tactics, techniques and procedures (TTPs), and indicators of compromise (IOCs) to protect themselves against Medusa ransomware. According to the ...
-
web:www.picussecurity.com
Medusa ransomware has compromised over 300 organizations. In this blog post, Picus explains the TTPs of the Medusa RaaS group in detail.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.