MegaMedusa: The DDoS Tool Taking the Hacker World by Storm

RipperSec, a pro-Palestinian Malaysian hacktivist group active since June 2023, claimed responsibility for 196 DDoS attacks from January–August 2024 using a Node.js tool called MegaMedusa; targets included government, education, business, and financial websites across Israel, India, the US, the UK and Thailand. The report details MegaMedusa's capabilities (request/randomization, proxy scraping/use, basic CAPTCHA bypass claims), likely use of compromised proxies, IoT botnets and cloud resources, and notes attackers may exploit HTTP/2-related weaknesses to increase attack efficiency.