Overview

• The Medusa ransomware group has targeted over 300 victims since 2021, focusing on critical sectors such as healthcare, education, and technology.
• Medusa uses a double extortion model, encrypting data and threatening to release it unless a ransom is paid.
• The FBI and CISA recommend enabling multi-factor authentication (MFA) for webmail accounts like Gmail and Outlook, VPNs, and critical system access to enhance security.
• Organizations are advised to maintain segmented, secure backups of sensitive data and regularly update and patch software to close vulnerabilities.
• Authorities discourage paying ransoms, as it does not guarantee data recovery and may encourage further criminal activity.