FBI, CISA Raise Alarms As Medusa Ransomware Attacks Grow

CISA, FBI, and MS-ISAC issued a #StopRansomware advisory warning about Medusa, a RaaS active since 2021 that has affected over 300 victims across healthcare, education, law, insurance, technology, manufacturing and other sectors; Medusa operators and affiliates conduct double-extortion (data theft then encryption), demand ransoms from about $100,000 up to $15 million, leverage initial access brokers and living-off-the-land techniques, and the advisory recommends patching, network segmentation, blocking untrusted access, and adopting an assumed-breach posture.