The Hacker News8h
Hackers Repurpose RansomHub's EDRKillShifter in Medusa, BianLian, and Play Attacks
RansomHub's EDRKillShifter used in 2024 ransomware by Medusa, BianLian, and Play, revealing cross-gang tool sharing.
Medusa ransomware is able to disable anti-malware tools, so be on your guard
Operators of the Medusa ransomware are engaging in old-fashioned bring-your-own-vulnerable-driver (BYOD) attacks, bypassing ...
SecurityWeek3d
Medusa Ransomware Uses Malicious Driver to Disable Security Tools
The Medusa ransomware relies on a malicious Windows driver to disable the security tools running on the infected systems.
WGAL on MSN5d
Federal authorities issue new warning about dangerous Medusa ransomware
Federal authorities have issued a new warning about a dangerous ransomware scheme that is sweeping across the country. It ...
SecurityWeek10h
Ransomware Groups Increasingly Adopting EDR Killer Tools
ESET uncovers a link between RansomHub, Play, Medusa, and BianLian ransomware gangs as more groups adopt tools to disable EDR software.
Ransomware gangs increasingly brandish EDR bypass tools
Ransomware actors are increasingly abusing vulnerable drivers to craft tools known as "EDR killers," which can disrupt and ...
Medusa ransomware using malicious driver as EDR killer
A Medusa ransomware campaign is using a malicious driver to disrupt and even delete endpoint detection and response (EDR) ...
GovInfoSecurity3d
Medusa Ransomware Brings Its Own Vulnerable Driver
A Russian-speaking ransomware group has been deploying a malicious Windows PE driver that imitates a legitimate CrowdStrike ...
CPO Magazine6d
Over 300 Critical Infrastructure Organizations Hit by Medusa Ransomware Attacks
The FBI, CISA, and MS-ISAC have issued a joint cybersecurity advisory on the Medusa ransomware attacks impacting over 300 ...
The Hacker News5d
Medusa Ransomware Uses Malicious Driver to Disable Anti-Malware with Stolen Certificates
Medusa ransomware uses ABYSSWORKER driver with stolen certificates to disable EDR and enable RDP access, risking data ...
WGAL5d
Federal authorities issue new warning about dangerous Medusa ransomware
MEDUSA WAS A GREEK PRIESTESS WHO HAD SNAKES FOR HAIR, SEEN HERE IN A MARBLE BUST. THIS RANSOMWARE WE’RE TALKING ABOUT NOW IS CALLED MEDUSA BECAUSE IT SNAKES ITS WAY THROUGH THE COMPUTER NETWORKS ...
WeLiveSecurity1d
Shifting the sands of RansomHub’s EDRKillShifter
ESET researchers discover new ties between affiliates of RansomHub and of rival gangs Medusa, BianLian, and Play.