FBI warns of cyberattack risk from Medusa ransomware

Medusa is a ransomware-as-a-service attack software that often uses phishing to steal victims' login credentials.

(Illustration photo. Getty images)

The US Federal Bureau of Investigation (FBI) and the US Cybersecurity and Infrastructure Security Agency (CISA) have issued a warning about the risk of attacks from the Medusa ransomware, a dangerous cyberattack software that has been active since 2021.

According to a warning posted this week, US officials said Medusa is a "ransomware-as-a-service" attack software that often uses online phishing activities to steal victims' login information.

In recent times, hundreds of organizations and individuals have become targets of Medusa.

According to CISA, Medusa operates on a “double extortion” model, which means it encrypts the victim’s data and then threatens to make the data public if the ransom is not paid.

The cybercriminal group behind Medusa operates a website that posts information about victims, with a countdown timer that threatens to release the data unless a ransom is paid.

The FBI and CISA recommend safeguards that include enabling multi-factor authentication for email and other critical services.

Another recommendation is to update operating systems, software, and other computer programs specifically to patch security holes.

Additionally, using strong passwords and avoiding changing them too frequently can also help increase security.

According to CISA, since February alone, Medusa's development teams and partners have attacked more than 300 organizations in many fields, including healthcare, education , legal, insurance, technology and manufacturing./.

Source: https://www.vietnamplus.vn/fbi-canh-bao-nguy-co-tan-cong-mang-tu-ma-doc-tong-tien-medusa-post1020830.vnp