Storm-1175's 16-Vulnerability Blitz Powers Medusa Ransomware Onslaught
Over three years, Storm-1175 exploited 16 vulnerabilities—including three zero-days—to unleash Medusa ransomware at breakneck speed. Healthcare orgs are bleeding, but who's cashing in?
⚡ Key Takeaways
- Storm-1175 exploited 16 vulns (3 zero-days) for Medusa ransomware since 2023, targeting healthcare and finance. 𝕏
- TTPs include rapid footholds, LOLBins, RMM abuse, and Defender evasion—patch gaps aggressively. 𝕏
- Mitigate with perimeter isolation, credential hygiene, and proactive hunting; they're profit-driven pros. 𝕏
Worth sharing?
Get the best Cybersecurity stories of the week in your inbox — no noise, no spam.
Originally reported by InfoSecurity Magazine
Related Stories
Ransomware & Malware
Storm-1175's Zero-Day Blitz: Ransomware Hits Where It Hurts Most
Ransomware & Malware
Storm-1175's Zero-Day Rampage: China Hackers Dropping Medusa Ransomware in Record Time
Ransomware & Malware
Medusa Ransomware: Zero-Days to Encryption in Under 24 Hours
Nation-State Threats