FBI warns of cyberattack risk from Medusa ransomware

Medusa is a ransomware-as-a-service attack software that often uses phishing activities to steal victims' login information.

(Illustration photo. Getty images)

The US Federal Bureau of Investigation (FBI) and the US Cybersecurity and Infrastructure Security Agency (CISA) have issued a warning about the risk of attacks from the Medusa ransomware, a dangerous cyberattack software that has been active since 2021.

Medusa is a "ransomware-as-a-service" attack software that often uses phishing to steal victims' login information, US officials said in a advisory posted this week.

In recent times, hundreds of organizations and individuals have become targets of Medusa.

According to CISA, Medusa operates on a “double extortion” model, which means it encrypts the victim's data and threatens to publicly release it if the ransom is not paid.

The cybercriminal group behind Medusa operates a website that posts information about victims, with a countdown clock that will release the data unless a ransom is paid.

The FBI and CISA recommend safeguards that include enabling multi-factor authentication for email and other critical services.

Another recommendation is to update operating systems, software, and other special computer programs to patch security holes.

Additionally, using strong passwords and avoiding changing them too frequently can also help increase security.

According to CISA, since February alone, Medusa's development teams and partners have attacked more than 300 organizations in many fields, including healthcare, education , legal, insurance, technology and manufacturing./.

Source: https://www.vietnamplus.vn/fbi-canh-bao-nguy-co-tan-cong-mang-tu-ma-doc-tong-tien-medusa-post1020830.vnp