medusalocker
Known ransomware group ACTIVE Currently active
Medusa is a DDoS bot written in .NET 2.0. In its current incarnation its C&C protocol is based on HTTP, while its predecessor made use of IRC.
3
Total Claims
0
Critical
—
Records Claimed
1
Industries Hit
Active span: Sep 23, 2026 – Nov 4, 2026 · 3 organizations targeted
Currently active
Actor Threat Profile
Activity Timeline
Peak: Sep 2026 (2)Sep 2026
LessMore
Nov 2026Share this profile
Top Targeted Industries
Energy & Utilities 1
Tradecraft & Infrastructure
0
Documented tools
1 / 1
MITRE tactics / techniques
5
Known leak sites