#MedusaLocker

Malware/Tool

2022-07-27 • Healthcare Ransomware Threats - MedusaLocker & Maui

MedusaLocker is a ransomware-as-a-service family active since 2019. Affiliates use phishing, spam, and exposed Remote Desktop Protocol access, establish persistence through a service and scheduled task, restart systems in safe mode, encrypt data, delete backups, and demand payment to Bitcoin wallets.

Tagged Reports

« Back