CISA: Medusa Ransomware Hit Over 500 Critical Infrastructure Orgs (bleepingcomputer.com) 5
CISA says the Medusa ransomware operation has breached more than 500 U.S. critical infrastructure organizations since 2021, up from more than 300 reported last year. The group has targeted healthcare, government, defense, manufacturing, IT and financial organizations, evolving into a ransomware-as-a-service operation that recruits initial-access brokers and uses stolen data to pressure victims into paying. BleepingComputer reports: The three federal agencies recommended that network defenders secure their networks against the ransomware group's attacks by mitigating security vulnerabilities to protect operating systems, software, and firmware from exploitation attempts. Security teams are also advised to segment networks to block lateral movement after compromise and to block access from untrusted origins to remote services on internal systems.
[...] "Medusa developers typically recruit initial access brokers (IABs) in cybercriminal forums and marketplaces to obtain initial access to potential victims," the advisory says. "Potential payments between $100 USD and $1 million USD are offered to these affiliates with the opportunity to work exclusively for Medusa."
[...] "Medusa developers typically recruit initial access brokers (IABs) in cybercriminal forums and marketplaces to obtain initial access to potential victims," the advisory says. "Potential payments between $100 USD and $1 million USD are offered to these affiliates with the opportunity to work exclusively for Medusa."
This Is What I Expect For My Tax Dollars (Score:4, Informative)
The three federal agencies recommended that network defenders secure their networks against the ransomware group's attacks by mitigating security vulnerabilities to protect operating systems, software, and firmware from exploitation attempts.
Patch your shit. That'll be $1 billion, please.
Re: (Score:1)
"And, for another billion, we'll monitor it 24/7 and email you if an intrusion is found, and for an additional million, we'll actually call you!"
Re: (Score:2)
"patch your shit" totally works too with 1000s of patches per month thanks to 'AI'
sounds exactly like sort of guidance CISA would spend $1 billion in tax dollars coming up with in 2026.
Re: (Score:3)
Well, the only better advice is "Don't put your master copy on the internet" and "Always have backups that you've checked".