Skip to content

CyberSIXT Search

Threat actor · coverage timeline

Medusa

8 articles from 7 outlets between 7 Oct 2025 and 19 Aug. First reported by Security Affairs. The busiest day was Tue 7 Apr, with 2 articles.

Articles: 8; all time · from 7 outlets
Days covered: 6; of 317 days · all time
Busiest day: 2; articles on Tue 7 Apr
Last 7 days: 0a day; vs 0 a day · previous 7 days
First report: 7 Oct 2025; Security Affairs
CVEs named: 2; 2 in CISA KEV · in these articles

Coverage over time

8 articles · 7 Oct 2025 – 19 Aug

7 Oct 2025First report7 Oct 2025 · Security Affairs

Show as table

Medusa: articles per day
Day (UTC)	Articles	Outlets
Tue 7 Oct 2025	1	Security Affairs 1
Mon 10 Nov 2025	2	SecurityOnline 1, GBHackers 1
Tue 7 Apr	2	The Hacker News 1, SecurityWeek 1
Thu 18 Jun	1	DataBreaches 1
Tue 18 Aug	1	DataBreaches 1
Wed 19 Aug	1	Infosecurity 1

Articles

8 articles

Wed 19 Aug1 article

11:01
FBI Warns Medusa Ransomware Hits 500+ Critical TargetsInfosecurity

Tue 18 Aug1 article

20:30
Medusa ransomware tallies hundreds of new victims, says updated advisory on group’s tacticsDataBreaches

Thu 18 Jun1 article

17:51
HCRG Care Group hit by Medusa ransomware, patients angeredDataBreaches

Tue 7 Apr2 articles

11:11
Medusa Ransomware Hits 300+ Organisations After Zero Day ExploitsSecurityWeek
08:11
China linked Medusa gang uses zero days to hit UK health, financeThe Hacker News

Mon 10 Nov 2025 20252 articles

10:25
Ransomware Operators Exploit RMM Tools to Deploy Medusa and DragonForceGBHackers
01:30
MSP Nightmare: Medusa & DragonForce Exploit SimpleHelp RMM Flaws for SYSTEM AccessSecurityOnline

Tue 7 Oct 2025 20251 article

20:20
GoAnywhere MFT zero-day used by Storm-1175 in Medusa ransomware campaignsSecurity Affairs · first report