FBI issues urgent warning to Gmail users.

The FBI has recommended that Gmail, Outlook, and VPN users take necessary measures to mitigate risks, and urged users to act quickly to protect critical systems.

The FBI issued a warning about the dangerous Medusa ransomware threat.

The level of danger posed by the Madusa ransomware group.

Operating since June 2021, Medusa is considered one of the most dangerous ransomware groups targeting individuals and businesses through ransomware-as-a-service (RaaS), with 300 reported victims. The group uses social engineering techniques and exploits unpatched software vulnerabilities to infiltrate systems.

Security expert Tim Morris from Tanium emphasized that Medusa's methods are highly sophisticated, with capabilities for "exploitation, persistence, sideways movement, and concealment," making the development of a comprehensive security plan extremely important. Meanwhile, Halcyon CEO Jon Miller stated that Medusa is a highly strategic group, often targeting critical infrastructure organizations because they cannot tolerate downtime.

The FBI's most recent investigation into Medusa's activities in February 2025 provided insight into how the group operates. The FBI gathered information on Medusa's tactics, techniques, and procedures before publishing it in cybersecurity advisory AA25-071A on March 12.

What are the solutions for Gmail, Outlook, and VPN users?

The FBI has issued urgent measures to address the threat from Medusa. The agency recommends that users enable two-factor authentication (2FA) for all services, especially Gmail, Outlook, and VPNs. The FBI emphasizes that this needs to be done immediately to protect data.

Gmail and Google Drive are experiencing global outages.

In addition, the FBI also provided several other important tips that users should follow to stay safe, including:

• Use long, strong passwords for all your accounts.
• Store multiple backups of important data in several different secure locations.
• Always keep your system, software, and firmware up to date.
• Use network monitoring tools to detect unusual activity.
• Limit administrative privileges and check these accounts regularly.
• Disable unnecessary command-line tools and scripts.
• Close unused network ports to reduce the risk of attack.

However, some experts argue that the FBI overlooked a crucial point in its preventative measures: training, because most ransomware attacks occur due to human error. Teaching people how to detect risks is just as important as teaching them how to avoid scams, and it can make a huge difference.

Source: https://thanhnien.vn/fbi-canh-bao-khan-cap-cho-nguoi-dung-gmail-185250316093940059.htm