medusalocker
Ransomware Group Profile
Overview
Medusa is a DDoS bot written in .NET 2.0. In its current incarnation its C&C protocol is based on HTTP, while its predecessor made use of IRC.
Dark Web Infrastructure (4)
qd7pcafncosqfqu3ha6fcx4h6sr7tzwagzpcdcnytiw3b6varaeqv5yd.onion
95.143.191.148:3000
z6wkgghtoawog5noty5nxulmmt2zs7c3yvwr22v4czbffdoly2kl4uad.onion
medusaxko7jxtrojdkxo66j7ck4q5tgktf7uqsqyfry4ebnxlcbkccyd.onion
Associated Threat Actors (1)
Activity Timeline
First SeenUnknown
Last SeenUnknown
Leak Sites4
Quick Actions