Ransomware C++ Active since 2019

Medusa

Medusa/MedusaLocker ransomware. JSON config: encryptedFileExtension skipExtensions masterPublicKey. RegCreateKeyExW persistence.

Threat Profile
Type Ransomware
Programming LanguageC++
C2 ProtocolHTTPS
First Seen2019
Targets Küresel
Purpose / Capabilities
  • Ransomware/RaaS
No C2 servers have been identified for this family yet.

Research Reports (1)

Critical

Medusa2 -- encryptedFileExtension skipExtensions masterPublicKey JSON Konfigürasyon Alanları, RegCreateKeyExW Başarısız | Kritik

Medusa2 757KB. encryptedFileExtension skipExtensions masterPublicKey JSON konfigürasyon alan adlari tespit edildi. RegCreateKeyExW başarisiz log.

Read Report →