Medusa Ransomware Attacks Critical Infrastructure Organizations

Medusa ransomware has attacked over 300 organizations in the manufacturing, technology, and medical sectors. Medusa developers and bad actors apply a double extortion model, where they first encrypt victims' data and then threaten to publicly release the data if the ransom is not paid. FBI and the CISA recommend disabling scripting and command-line permissions and activities.