logo

Interview #9 MedusaLocker

ID: 601f84c8-28bd-59ca-8cc2-dff60e00026e

STIX ID: report--601f84c8-28bd-59ca-8cc2-dff60e00026e

Feed Name: deepdarkCTI

Threat Score
75/100

Date Published: 2026-05-11

Date Updated: 2026-05-12

Author: Erez

...
...

This interview with a MedusaLocker operator discusses the gang's RaaS business model, target selection policies (claiming to avoid social welfare organizations), extortion techniques including data exfiltration and selective encryption, typical ransom demands ($10,000–$80,000), and operational details such as file extensions used to tag victims and publication practices when negotiations fail.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.