Healthcare IT News March 31, 2025
Now operating as ransomware-as-a-service, affiliates employ a double or triple extortion where they encrypt victim data, threaten to publicly release exfiltrated data if a ransom is not paid and may request an additional ransom.
The Federal Bureau of Investigation and the Cybersecurity and Infrastructure Security Agency are warning healthcare organizations and others that Medusa ransomware affiliates seek to exploit unpatched software and other common vulnerabilities and exposures.
WHY IT MATTERS
The joint advisory, issued with the Multi-State Information Sharing and Analysis Center, describes known Medusa ransomware tactics, techniques...