IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure

critical threatRansomwareMalware Family

Historical

Medusa

Critical severity

84

IOCs Tracked

—

First Seen

—

Last Seen

0

YARA Rules

Associated IOCs84 total · showing 50

IP23

167.88.166.173

2026-08-19Medium

85.155.186.121

185.238.231.77

143.244.47.89

23.234.106.242

23.234.89.195

185.238.231.85

23.234.93.112

37.221.66.239

185.238.231.16

143.110.243.154

185.238.231.98

94.156.67.145

146.70.172.247

185.238.231.4

83.138.53.139

185.135.86.185

Domain1

erp.ranasons.com

2026-08-19Medium

URL1

http://45.61.150.94:8000/storm.exe

CVE25

CVE-2026-18577

CVE-2026-33825

CVE-2024-57728

CVE-2024-57726

CVE-2026-34197

CVE-2026-1340

CVE-2026-41940

CVE-2026-33032

CVE-2026-20133

CVE-2026-20122

CVE-2023-27351

CVE-2024-27199

CVE-2023-21529

CVE-2026-20128

CVE-2026-35616

CVE-2025-29635

CVE-2025-48700

CVE-2024-1708

CVE-2026-32202

CVE-2025-31324

2026-06-02Medium

Related Reports8 shown

CISA Warns of Medusa Ransomware-as-a-Service Attacks Over 300 Organizations

Cyber PressAug 19, 2026

Storm-1175 Deploys New StormEncryptor Ransomware, Likely Exploiting N-able Flaw

Cyber PressAug 8, 2026

Gentlemen EDR Killer Suite Combines HexKiller, ThrottleBlood, and HavocKiller

Cyber PressJun 20, 2026

April 2026 CVE Landscape

Recorded Future BlogMay 15, 2026

Storm-1175 focuses gaze on vulnerable web-facing assets in high-tempo Medusa ransomware operations

Microsoft Threat IntelligenceApr 6, 2026

Understanding Microsoft Defender Threat Intelligence (Defender TI)

Security InvestigationFeb 15, 2023

Cyber Conflict Briefing Q4 2025

DCSO CyTec BlogFeb 13, 2026

Cyber Conflict Briefing Q1 2026

DCSO CyTec BlogMay 8, 2026

Threat Profile

TypeRansomware

StatusHistorical

IOCs tracked84