A joint report by FBI, CISA, and MS-ISAC warns that Medusa ransomware has targeted hundreds of critical infrastructure organizations.
Over the last four years, more than 300 victims from various sectors, including medical, education, legal, insurance, technology, and manufacturing, have been impacted.
The report suggests implementing the recommended mitigations, such as patching vulnerabilities, segmenting networks, and filtering network traffic to reduce the risk of Medusa ransomware incidents.
Medusa ransomware, originally a closed variant, evolved into a Ransomware-as-a-Service (RaaS) with an affiliate model and has become a dangerous threat.