Ransomware needs a way in. Stolen credentials are the cheapest one.

EcoPetróleo Ransomware Attack

Ransomware victimRansomed

medusaGroup

Dominican RepublicCountry

Oct 13, 2025Discovered

Overview

View group profile

Industry

Energy & Utilities

Country

Dominican Republic

Discovered

12 months ago

Attack date

Oct 13, 2025

Confidence

70%

Severity

Medium

Status

Claimed

Threat group

medusa

Total victims

First seen

Oct 2025

Last seen

Apr 2026

Group status

active

Sophistication

Impact score

123

Threat level

3.2/10

Aggressiveness7/10

Lethality0.2/10

Criticality2.4/10

Status breakdown

Data Leaked2.9%4

Claimed

this victim

97.1%136

Targeted sectors

Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Energy & Utilities

Known target sector

Country

Dominican Republic

Frequently targeted country

Other victims

View all (140)

Same group · medusa

Group activity

Monthly attacks · medusa

total · avg 8/mo