Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Medusalocker

Active
World map Statistics ATT&CK Navigator
Medusa is a DDoS bot written in .NET 2.0. In its current incarnation its C&C protocol is based on HTTP, while its predecessor made use of IRC.
Victims
123
20 this month
Rank
#63 / 388
#34 over the last 12 months
First victim
2021-11-03
estimated attack date
Last victim
2026-11-11
4 days ago
Attack → claim
83.1 d
average delay
Countries
28
hit
Infostealer
41.2%
of victims with a domain
Leak-site uptime
69.3% average, 30 days

Victims per month

+900%
By estimated attack date when known, otherwise by discovery date.

Top sectors

  • Manufacturing 21 · 17%
  • Technology 19 · 15%
  • Professional Services 16 · 13%
  • Other 8 · 7%
  • Retail & E-Commerce 7 · 6%
  • Education 6 · 5%
  • Government & Defense 5 · 4%
  • Agriculture and Food Production 5 · 4%
  • Transportation 4 · 3%
  • Financial Services 4 · 3%

Top countries

What ransomware.live knows about medusalocker

Exclusive interview with medusalocker by the CyberSecurityIL Telegram channel: read it

External information