Uncovering Ransomware gang Medusa

Who's Medusa?

Medusa is a group that first came to prominence in 2023, contrary to what you might believe their business model is quite different from the standard Ransomware as a Service and they operate on a monitored division of subgroups. Lately we have noticed some strange behavior from the admin as confirmed by other affiliates, he seems completely absent and unresponsive to the needs of his members. He recently deleted all groups on the RocketChat server without warning leaving the affiliates with only two plausible reasons: exit scam, admin arrested by authorities. Would you trust Medusa if it were to become active again? Below we have left you an interesting list of current affiliates who participate in the Medusa program, now you know where to repopulate and make lots of money with your skills :D

  • boss
  • mat
  • ray
  • sda
  • cz75
  • atari
  • tranc
  • lumma
  • Jester
  • amilan
  • nopiro
  • OSINT1
  • OSINT2
  • drumrlu
  • gabriel
  • van_nms
  • valencia
  • datastore
  • Media Team (OSINT Corp)

    • Internal communications

    Thanks to our insiders we were able to gather a minimal but interesting amount of historical internal communications between affiliates and their so-called "boss", archive is located here -> DOWNLOAD