Risk Letters

Threat actor

Medusalocker

TLP:CLEAR

Facts

  • Motivation: Financial
  • Malware and tools: Advanced IP Scanner, Advanced Port Scanner, HRSword, Impacket, Invoke-TheHash, Mimikatz, PCHunter, ProcessHacker, Remote Desktop Plus (RDP+), SoftPerfect NetScan
  • Techniques (MITRE ATT&CK): Parent PID Spoofing

Members get the actor's profile, its recent incidents and our assessment in the dashboard.

Get the full brief

Data: NVD (public domain), CISA KEV, FIRST EPSS, MITRE ATT&CK, AlienVault OTX.