Ransomware needs a way in. Stolen credentials are the cheapest one.
medusalocker Ransomware Group
Ransomware group profile
84Victims
Description
No description available for this group.
Threat Level & Status Breakdown
For medusalocker ยท Based on incidents in selected period
2.2threat level
Claimed100.0%84
First seenNov 2025
Last seenOct 2026
Avg ransomโ
Payment rateโ
Recent activity
Monthly attack count for medusalocker in the selected period
84Total attacks
26peak in May
12avg / month
No intelligence data for this group.
TTPs & Attack Vectors
Tools, initial access, and MITRE ATT&CK techniques for medusalocker
Defense Evasion
T1562
Impair Defenses
Discovery
T1046
Network Service Discovery
Execution
T1059
Command and Scripting Interpreter
T1105
Ingress Tool Transfer
Impact
T1486
Data Encrypted for Impact
T1490
Inhibit System Recovery
Lateral Movement
T1021
Remote Services
Other
T1557
T1557
T1041
T1041
Persistence
T1078
Valid Accounts
Victims(77)
| Company | Country | Status | Discovered | |
|---|---|---|---|---|
| Millensys | Brazil | Claimed | 11 days ago | |
| Rรผegsegger AG | Switzerland | Claimed | 11 days ago | |
| PKSF โ Palli Karma-Sahayak Foundation | Bangladesh | Claimed | 17 days ago | |
| Junta de Andalucรญa | Spain | Claimed | 18 days ago | |
| Premiumfruits | Spain | Claimed | 18 days ago | |
| ATCO Ltd | Canada | Claimed | 18 days ago | |
| Aokkef | France | Claimed | 23 days ago | |
| Seznam | Czech Republic | Claimed | 23 days ago | |
| ะะะ | Bulgaria | Claimed | 23 days ago | |
| ็็ฅฅๆบ็ต | China | Claimed | about 1 month ago | |
| Abourametals | United Arab Emirates | Claimed | about 1 month ago | |
| Frisby Construction LLC | United States | Claimed | about 1 month ago | |
| Praveg Caves Jawai | India | Claimed | about 1 month ago | |
| Licindia | India | Claimed | about 1 month ago | |
| Lawter | United States | Claimed | about 2 months ago | |
| The Joint Graduate School of Energy and Environment | Thailand | Claimed | about 2 months ago | |
| Servifruit | Mexico | Claimed | about 2 months ago | |
| Hungry Lion | Ghana | Claimed | about 2 months ago | |
| Qualisteel | Brazil | Claimed | about 2 months ago | |
| NSW Health | Australia | Claimed | about 2 months ago |
ThailandEducationjgsee.kmutt.ac.th
Claimed
about 2 months agoPage 1 of 4
Affected countries(24)
Countries where this group has been reported to target or leak victims.
๐ฆ๐ชUnited Arab Emirates๐ฆ๐บAustralia๐ง๐ฉBangladesh๐ง๐ฌBulgaria๐ง๐ทBrazil๐จ๐ฆCanada๐จ๐ญSwitzerland๐จ๐ณChina๐จ๐ทCosta Rica๐จ๐ฟCzech Republic๐ฉ๐ชGermany๐ช๐ธSpain๐ซ๐ทFrance๐ฌ๐งUnited Kingdom๐ฌ๐ญGhana๐ฎ๐ฑIsrael๐ฎ๐ณIndia๐ฎ๐ทIran๐ฎ๐นItaly๐ฒ๐ฝMexico๐ฒ๐พMalaysia๐น๐ญThailand๐บ๐ธUnited States๐ฟ๐ฆSouth Africa