All Threat Groups
ID: medusa
Medusa Syndicate Dossier
First Intercepted
2023-01-11
Latest Disclosure
2026-04-28
Victim Velocity
1.0 / claim
Threat Profile & Operational Narrative
Operating prominently since late 2022, Medusa is an aggressive RaaS enterprise distinct from earlier MedusaLocker variants that deploys robust C/C++ payloads against corporate networks. The group strikes healthcare, educational institutions, manufacturing, and public sector targets across North America, Europe, and Asia. Initial compromise occurs via unpatched internet-facing appliances and compromised remote services, with extortion driven by an active 'Medusa Blog' and Telegram channels that auction victim data or offer fee-based countdown extensions.
Tactics, Techniques & Procedures (MITRE ATT&CK)
T1190: Exploit Public-Facing Application T1133: External Remote Services T1078: Valid Accounts T1059.003: Windows Command Shell T1047: Windows Management Instrumentation T1021.001: Remote Desktop Protocol T1562.001: Disable or Modify Tools T1489: Service Stop T1490: Inhibit System Recovery T1486: Data Encrypted for Impact
Known Dark Web Infrastructure & Mirrors
medusaxko7jxtrojdkxo66j7ck4q5tgktf7uqsqyfry4ebnxlcbkccyd.onion
OFFLINE
medusakxxtp3uo7vusntvubnytaph4d3amxivbggl3hnhpk2nmus34yd.onion
OFFLINE
xfv4jzckytb4g3ckwemcny3ihv4i5p4lqzdpi624cxisu35my5fwi5qd.onion
OFFLINE
dlmfciajg5s4vliyo5dhs5jyzhi2xr2fnkebul46lpf4xudtqiue4nid.onion
OFFLINE
kyfiw76eol6ph2mq7pi5e5tdvce37bicddhai62qhdc5ja6jdchz4qqd.onion
OFFLINE
s7lmmhlt3iwnwirxvgjidl6omcblvw2rg75txjfduy73kx5brlmiulad.onion
OFFLINE
45.9.148.39
OFFLINE
cx5u7zxbvrfyoj6ughw76oa264ucuuizmmzypwum6ear7pct4yc723qd.onion
OFFLINE
xfv4jzckytb4g3ckwemcny3ihv4i5p4lqzdpi624cxisu35my5fwi5qd.onion
OFFLINE
hupxs7ps7md24kpz4lwsbra64abgxjx3pcc2wuca5ibawf2g5hlpfyqd.onion
OFFLINE
62foekhv5humjrfwjdyd2dgextpbf5i7obguhwvfoghmu3nxpkmxlcid.onion
OFFLINE
7aqabivkwmpvjkyefonf3gpy5gsubopqni7kcirsrq3pflckxq5zz4id.onion
OFFLINE
Disclosed Victims & Incident Archive (533)
| Disclosed | Victim Organization | Sector | Country |
|---|---|---|---|
| 2026-04-28 | Walman Optical | General | -- |
| 2026-04-28 | Northeast Missouri Rural Telephone | General | -- |
| 2026-04-09 | TouchSource | General | -- |
| 2026-04-09 | Big Thumb | General | -- |
| 2026-04-09 | Live! Casino | General | -- |
| 2026-03-17 | Bonanza Casino | General | -- |
| 2026-03-17 | Passaic County | General | -- |
| 2026-03-17 | Lehigh Carbon Community College | General | -- |
| 2026-03-17 | Cape May County | General | -- |
| 2026-03-16 | AMEVIDA | General | -- |
| 2026-03-16 | ToolpartsPro | General | -- |
| 2026-03-16 | Chartre Consulting | General | -- |
| 2026-03-16 | Colonial Van Lines | General | -- |
| 2026-03-12 | University of Mississippi Medical Center | General | -- |
| 2026-03-10 | Frauenshuh | General | -- |
| 2026-03-10 | Acme | General | -- |
| 2026-03-10 | Shaft Drillers International | General | -- |
| 2026-03-10 | Internation Planning Group | General | -- |
| 2026-02-13 | MESA Products | General | -- |
| 2026-02-08 | Grandview Family Medicine | General | -- |
| 2026-02-02 | Comune di Battipaglia | General | -- |
| 2026-01-29 | South Hays Fire Department | General | -- |
| 2026-01-29 | Balloons Everywhere | General | -- |
| 2026-01-04 | Resource Corporation of America | General | -- |
| 2025-12-23 | JBS | General | -- |
| 2025-12-17 | Callipo Group | General | -- |
| 2025-12-13 | Shamrock Technologies | General | -- |
| 2025-12-13 | Sampoerna Agro | General | -- |
| 2025-12-13 | Thunder Bay Counselling | General | -- |
| 2025-11-28 | Concord Academy | General | -- |
| 2025-11-24 | WR Comercial | General | -- |
| 2025-11-24 | Universidade Municipal de São Caetano | General | -- |
| 2025-11-17 | Nationwide Legal LLC | General | -- |
| 2025-11-17 | MFE Formwork Technology | General | -- |
| 2025-11-17 | FDC Interiors | General | -- |
| 2025-11-17 | General Distributing | General | -- |
| 2025-11-08 | Atrium Living Centers | General | -- |
| 2025-11-06 | PT Kalimantan Prima Persada | General | -- |
| 2025-11-05 | Oscars Group | General | -- |
| 2025-11-05 | LaRosa’s Pizzeria | General | -- |
| 2025-10-29 | Clackamas Community College | General | -- |
| 2025-10-28 | Simon Property Group | General | -- |
| 2025-10-22 | Alissa Group | General | -- |
| 2025-10-22 | Cooperativa Esercenti Farmacia Scrl | General | -- |
| 2025-10-22 | ATIRG | General | -- |
| 2025-10-22 | Adore Children and Family Services | General | -- |
| 2025-10-19 | DALCANS | General | -- |
| 2025-10-19 | Linxx Global Solutions | General | -- |
| 2025-10-19 | Imagicle | General | -- |
| 2025-10-14 | Leprohon (Image !) | General | -- |
| 2025-10-13 | Cemtrex | General | -- |
| 2025-10-12 | EcoPetróleo | General | -- |
| 2025-10-12 | Design To Print | General | -- |
| 2025-10-12 | LA VOIE EXPRESS | General | -- |
| 2025-10-09 | Leprohon | General | -- |
| 2025-10-07 | Lux Actuaries & Consultants | General | -- |
| 2025-10-03 | LGB | General | -- |
| 2025-09-27 | Future Generali | General | -- |
| 2025-09-26 | Insightin Health | General | -- |
| 2025-09-26 | Organon | General | -- |
| 2025-09-26 | Comcast | General | -- |
| 2025-09-23 | CCMC | General | -- |
| 2025-09-08 | Cariri | General | -- |
| 2025-09-06 | Rad-Solutions, LLC | General | -- |
| 2025-09-01 | TEAM GROUP | General | -- |
| 2025-09-01 | Level | General | -- |
| 2025-08-26 | Aldagi | General | -- |
| 2025-08-17 | Florarte | General | -- |
| 2025-08-17 | Expert E-commerce GmbH | General | -- |
| 2025-08-06 | PANSARD & ASSOCIES | General | -- |
| 2025-07-30 | White Coffee Corporation | General | -- |
| 2025-07-30 | Franklin Pierce Schools | General | -- |
| 2025-07-03 | Prosecuting Attorneys' Council of Georgia | General | -- |
| 2025-07-01 | Sermo | General | -- |
| 2025-06-27 | Southwest CARE Center | General | -- |
| 2025-06-13 | Sun Direct | General | -- |
| 2025-06-13 | R&W Engineering | General | -- |
| 2025-06-09 | San Jose Country Club | General | -- |
| 2025-06-09 | Hartwig Mechanical Inc | General | -- |
| 2025-06-09 | Bumfords | General | -- |
| 2025-05-30 | Town of North Providence Rhode Island corporate office | General | -- |
| 2025-05-27 | RE/MAX | General | -- |
| 2025-05-27 | Presort First Class | General | -- |
| 2025-05-27 | Bailey's | General | -- |
| 2025-05-14 | DSI Tech | General | -- |
| 2025-05-13 | DeVita & Associates, Inc. | General | -- |
| 2025-05-13 | Nottingham Construction | General | -- |
| 2025-05-12 | Trindel Insurance Fund | General | -- |
| 2025-05-06 | Russell Child Development Center | General | -- |
| 2025-05-06 | Lake Shore Paving | General | -- |
| 2025-05-01 | Weil Construction, Inc | General | -- |
| 2025-04-24 | Appalachian Regional Commission | General | -- |
| 2025-04-24 | Conditioned Air Corporation | General | -- |
| 2025-04-22 | Phelps United | General | -- |
| 2025-04-22 | Matthews Law | General | -- |
| 2025-04-19 | MRC de Maskinongé - district | General | -- |
| 2025-04-16 | Lithium Americas Nevada | General | -- |
| 2025-04-14 | Pawnee Heights Unified School District | General | -- |
| 2025-04-12 | Fall River Public Schools | General | -- |
| 2025-04-08 | National Association for Stock Car Auto Racing | General | -- |
Showing 100 most recent disclosures of 533 total records. Use the Live Feed or API for complete records.