Medusa-skeet.zip -
The group employs "double extortion," where they both encrypt data and threaten to leak it on their dedicated "Medusa Blog" or Telegram channel.
Consult the CISA Medusa Ransomware Advisory for specific indicators of compromise (IOCs). Medusa-SKEET.zip
ZIP files may contain legitimate management software used maliciously to move through a victim's network. ⚠️ Safety Recommendations If you have encountered this file: The group employs "double extortion," where they both
Malicious ZIP files are often uploaded via webshells or sent through spear-phishing campaigns to install persistence tools like ConnectWise. 🛠️ Common File Characteristics ⚠️ Safety Recommendations If you have encountered this
Use professional security suites. Ensure your system is patched against known vulnerabilities like those in Microsoft Exchange or Fortra GoAnywhere .
Large organizations in healthcare, education, and manufacturing.
Disconnect the machine from the network to prevent the ransomware from spreading laterally.