Medusa Ransomware Threat: What do the FBI and CISA warn Gmail and Outlook Users?

Medusa ransomware. This malware has targeted various industries by breaching data through phishing and exploiting security weaknesses. Authorities have shared ways to prevent attacks and secure networks.

Medusa Ransomware

Medusa ransomware was first detected in June 2021. The FBI and CISA announced this on March 12. The advisory is part of the #StopRansomware campaign.

Also Read: Mistletoe Murders Season 2: What we know about renewal

Impact of Cyber Attacks

As of February 2025, over 300 victims have been affected. Attackers use different methods to gain access. They pay brokers between $100 and $1 million to infiltrate networks. Common tactics include phishing emails and exploiting unpatched software vulnerabilities.

Spearwing Group

Symantec published a blog post on March 6. It identified Spearwing as the group behind these attacks. The group uses double extortion tactics. They steal data before encrypting networks. If victims refuse to pay, they threaten to release the stolen data online.

Live Events

Also Read: When Calls the Heart Season 12: Episode 12 release date, time, upcoming episodes and where to watch

Victims and Ransom Demands

Spearwing has targeted hundreds of individuals and organizations since 2023. Their data leak site lists around 400 victims. The actual number is likely higher. Ransom demands range from $100,000 to $15 million. Attackers also hijack legitimate accounts, including those of healthcare organizations.

Unknown Infection Methods

In some cases, it is unclear how attackers gain initial access. Symantec noted that other methods might be involved. Investigations continue to understand how these breaches occur.

FAQs

What is Medusa ransomware?
Medusa ransomware is a cyber threat