Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
critical threatRansomwareMalware Family
Historical
Medusa
Critical severity
130
IOCs Tracked
—
First Seen
—
Last Seen
0
YARA Rules
Associated IOCs130 total · showing 50
IP23
167.88.166.1732026-08-19Medium
85.155.186.1212026-08-19High
185.238.231.982026-08-19High
143.110.243.1542026-08-19High
155.2.215.712026-08-19High
37.19.21.1802026-08-19High
185.135.86.1852026-08-19High
185.238.231.162026-08-19High
134.195.91.2242026-06-02High
185.135.86.1492026-06-02High
94.156.67.1452026-08-19High
47.243.233.2442026-06-02High
146.70.172.2472026-08-19High
83.138.53.1392026-08-19High
37.221.66.2392026-08-19High
23.234.93.1122026-08-19High
185.238.231.852026-08-19High
23.234.89.1952026-08-19High
23.234.106.2422026-08-19High
155.2.215.692026-08-19High
Domain1
erp.ranasons.com2026-08-19Medium
URL1
http://45.61.150.94:8000/storm.exe2026-08-19High
CVE25
CVE-2026-185772026-08-14High
CVE-2026-125692026-08-21High
CVE-2026-194782026-08-28High
CVE-2026-338252026-08-10High
CVE-2026-13402026-08-26High
CVE-2026-341972026-06-03High
CVE-2024-577282026-06-03High
CVE-2024-577262026-06-03High
CVE-2026-735702026-08-28High
CVE-2025-32482026-08-21Medium
CVE-2025-57772026-08-26Medium
CVE-2026-704652026-08-21High
CVE-2026-260352026-08-21High
CVE-2026-704682026-08-21High
CVE-2025-275582026-08-28Medium
CVE-2026-419402026-07-27High
CVE-2026-17312026-08-27Medium
CVE-2026-52812026-09-05Medium
CVE-2025-487002026-06-03High
CVE-2024-17082026-06-03High
Related Reports11 shown
From ‘High/Medium/Low’ to Dollars: Making Cyber Risk Legible to Your CFO
CybleAug 25, 2026
Weekly Threat Landscape Digest – Week 34
HawkEyeAug 21, 2026
The Good, the Bad and the Ugly in Cybersecurity – Week 34
SentinelOne BlogAug 21, 2026
CISA Warns of Medusa Ransomware-as-a-Service Attacks Over 300 Organizations
Cyber PressAug 19, 2026
Storm-1175 Deploys New StormEncryptor Ransomware, Likely Exploiting N-able Flaw
Cyber PressAug 8, 2026
Gentlemen EDR Killer Suite Combines HexKiller, ThrottleBlood, and HavocKiller
Cyber PressJun 20, 2026
April 2026 CVE Landscape
Recorded Future BlogMay 15, 2026
Storm-1175 focuses gaze on vulnerable web-facing assets in high-tempo Medusa ransomware operations
Microsoft Threat IntelligenceApr 6, 2026
Understanding Microsoft Defender Threat Intelligence (Defender TI)
Security InvestigationFeb 15, 2023
Cyber Conflict Briefing Q4 2025
DCSO CyTec BlogFeb 13, 2026
Cyber Conflict Briefing Q1 2026
DCSO CyTec BlogMay 8, 2026
Threat Profile
TypeRansomware
StatusHistorical
IOCs tracked130