Ransomware Group intelligence
Medusa
InactiveTrack Medusa with 518 published victims and 10 known leak locations in a single intelligence view.
Overview
Medusa is tracked by Breach House as a ransomware group with 518 published victims.
United States is currently the most targeted country in this dataset.
10 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (10)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | medusaxko7jxtrojdkxo66j7ck4q5tgktf7uqsqyfry4ebnxlcbkccyd.onion |
| Leak location 2 | Onion service | Unknown | medusakxxtp3uo7vusntvubnytaph4d3amxivbggl3hnhpk2nmus34yd.onion |
| Leak location 3 | Onion service | Unknown | xfv4jzckytb4g3ckwemcny3ihv4i5p4lqzdpi624cxisu35my5fwi5qd.onion |
| Leak location 4 | Onion service | Unknown | dlmfciajg5s4vliyo5dhs5jyzhi2xr2fnkebul46lpf4xudtqiue4nid.onion |
| Leak location 5 | Onion service | Unknown | kyfiw76eol6ph2mq7pi5e5tdvce37bicddhai62qhdc5ja6jdchz4qqd.onion |
| Leak location 6 | Onion service | Unknown | s7lmmhlt3iwnwirxvgjidl6omcblvw2rg75txjfduy73kx5brlmiulad.onion |
| Leak location 7 | Web location | Unknown | 45.9.148.39 |
| Leak location 8 | Onion service | Unknown | cx5u7zxbvrfyoj6ughw76oa264ucuuizmmzypwum6ear7pct4yc723qd.onion |
| Leak location 9 | Onion service | Unknown | xfv4jzckytb4g3ckwemcny3ihv4i5p4lqzdpi624cxisu35my5fwi5qd.onion |
| Leak location 10 | Onion service | Unknown | hupxs7ps7md24kpz4lwsbra64abgxjx3pcc2wuca5ibawf2g5hlpfyqd.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (518)
Search, filter and paginate the victim timeline for Medusa. Showing 501–518 of 518.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | Moose, Martin, Haynes & Lundy id5512 View details | Services | |||
|
For years, Moose, Martin, Haynes & Lundy, P.A. has been providing quality, personalized financial guidance to local individuals and businesses. Our expertise ranges from basic tax management and accounting services to more in-depth services such as audits, financia |
|||||
| Ransomware | International Center of Photography id5491 View details | Services | |||
|
New York, 374 Employees. The International Center of Photography is the world's leading institution dedicated to photography and visual culture. Cornell Capa founded ICP in 1974 to champion "concerned photography"-socially and politically minded images that can educate and change the world |
|||||
| Ransomware | AP Emissions Technologies id5467 View details | United States | IT | ||
|
Automotive Parts · North Carolina, United States AP® Emissions Technologies is one of the leading manufacturers and suppliers of automotive, light truck, and heavy-duty exhaust and emissions products under the AP®, DuraFit®, Eastern Catalytic®, CATCO ®, ANSA®, Cherry Bomb®, DieselTech™, DuraFit™, Maremont®, XLERA and much more. |
|||||
| Ransomware | Foamtec International id5454 View details | IT | |||
|
The best of East and West - that is the strength of Foamtec International. Combining Western cutting edge technology with Eastern traditions of dedicated customer service, Foamex Asia was established in 1997 as a joint venture between Foamex International Inc. |
|||||
| Ransomware | PetroChina Indonesia id5448 View details | Indonesia | Energy | ||
|
PetroChina Indonesia is a company that operates in the Oil & Energy industry. It employs 251-500 people and has $25M-$50M of revenue. The company is headquartered in Jakarta, Jakarta, Indonesia |
|||||
| Ransomware | Eureka Casino Resort id5438 View details | Hospitality / Food & Beverage / Tourism | — | ||
|
Eureka Casinos was founded by the Lee family in Las Vegas, NV. It operates a wide-ranging number of businesses, including Eureka Casino Resort in Mesquite, NV. The Lee Family sold it to the employees in 2015 making it Nevada's first 100% employee owned casino |
|||||
| Ransomware | Tonga Communications id5396 View details | Tonga | Communication / Marketing | ||
|
Tonga Communications Corporation is a government-owned telecommunications provider offering mobile, fixed line, and internet services. It is based in Nuku'alofa. Tonga Communications Corporation Is Tonga's NO.1 cellular, fixedline & internet provider. |
|||||
| Ransomware | Diethelm Keller Aviation Pte Ltd id5392 View details | Singapore | Transportation / Travel / Logistics | ||
|
Diethelm Keller Aviation Pte Ltd (DKA), a global leader in galley inserts for the airline industry, is a wholly owned subsidiary of Diethelm Keller Brands Ltd. We are headquartered in Singapore. |
|||||
| Ransomware | Elektro Richter id5355 View details | Germany | Manufacturing / Engineering | — | |
|
Elektro Richter is a company that operates in the Electrical/Electronic Manufacturing industry. It employs 21-50 people and has $5M-$10M of revenue. The company is headquartered in Hildburghausen, Thuringia, Germany |
|||||
| Ransomware | Elim Clinic id5354 View details | South Africa | Healthcare / Pharma | — | |
|
Elim Clinic is a professional treatment centre that offers inpatient treatment to men and women, 18 years and older who suffer from substance use disorders and behaviour addiction. Elim has been in existence for more than six decades and has a wealth of experience |
|||||
| Ransomware | PFA Systems id5353 View details | Communication / Marketing | — | ||
|
PFA SYSTEMS, Inc. was started over thirty years ago with a single vision in mind, to provide reliable and safety conscientious service to our Suppliers and Drivers.This vision continues to carry on from day one when we were a single operator company, to our current fleet. We currently serve 14 states regionally and continuously work to establish trust between our clients and drivers.We specialize in Hazardous Bulk Liquid transport, but we are not limited to a single product. We integrate cutting edge safety practice and equipment to deliver the peace of mind our customers have come to rely upon and expect. |
|||||
| Ransomware | EnCom id5352 View details | Manufacturing / Engineering | — | ||
|
Founded in 2001, EnCom Inc is a specialty producer of custom compounded high-performance polymers serving the automotive, transportation, electronic, consumer goods, lawn and garden equipment, medical, material handling, and industrial industries. |
|||||
| Ransomware | European Window id5334 View details | Australia | Energy | — | |
|
European Window Company is an Australian leader in the design and installation of high efficiency thermal break windows, doors and sliding systems. |
|||||
| Ransomware | Bank of Africa id5318 View details | Senegal | Finance / Legal / Insurance | ||
|
Headquartered in the city of Dakar, Senegal, the story of Bank of Africa Group began in Mali in 1982, with the first Bank of Africa, which was created with almost no external help. Since 2010, the Bank of Africa Group has been majority-owned by BMCE Bank. |
|||||
| Ransomware | EightPixelsSquare id5289 View details | United Kingdom | Communication / Marketing | — | |
|
Founded in December 2012 and based in Derby, United Kingdom, EightPixelsSquare comprises of an elite team of 45 veteran game developers. Over 30 million players worldwide enjoy EightPixelsSquare's catalogue of games across iOS and Android platforms |
|||||
| Ransomware | Aglobis id5270 View details | Communication / Marketing | — | ||
|
Resistance shall not prevent us from fulfilling below mission: We connect industries for their sustainable operation and growth! Above services to be provided on a long term basis, i.e. indefinitely which is represented by the similar symbol in our logo Aglobis |
|||||
| Ransomware | Integerity Tax id5223 View details | Finance / Legal / Insurance | — | ||
|
Small business accounting, tax preparation, bookkeeping, payroll, individual taxes |
|||||
| Ransomware | Grace Church International id5224 View details | Communication / Marketing | — | ||
|
We Believe the Bible is God's supreme authority of the church and that prayer builds a relationship with God. We believe that faith empowers one to believe the impossible. That family is the foundation of the church and each person has a uniquely designed purpose |
|||||