ZeroHour

medusa

Ransomware / extortion group tracked from leak-site posts

Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
0
All-time (tracked)
530since 2023-02-13
Last post
04-26 16:15UTC
Estimated earnings
public reporting
Profile not written yet: the pipeline profiles the most active groups first, a few per run.

Leak-site victims

VictimDiscoveredDetails
Sonda · Apr 3, 2023
Arandell Corp · Apr 2, 2023
Gujarat Mineral · Mar 24, 2023
Atlas Security · Mar 21, 2023
Law Firm Vazquez Nava Consultores y Abogados, S.C · Mar 18, 2023
National Institute of Ocean Technology · Mar 16, 2023
LLPGroup · Mar 14, 2023
Bishop Luffa School · Mar 13, 2023
Garbarino SAICeI · Mar 10, 2023
National Business Furniture · Mar 10, 2023
Minneapolis Public Schools · Mar 7, 2023
The Institute of Space Technology · Mar 6, 2023
Kenya Airports Authority · Mar 1, 2023
RAYAB Consulting Engineers · Feb 22, 2023
Moose, Martin, Haynes & Lundy · Feb 22, 2023
International Center of Photography · Feb 19, 2023
AP Emissions Technologies · Feb 17, 2023
Foamtec International · Feb 16, 2023
PetroChina Indonesia · Feb 15, 2023
Eureka Casino Resort · Feb 14, 2023
Aglobis · Feb 13, 2023
EightPixelsSquare · Feb 13, 2023
Bank of Africa · Feb 13, 2023
European Window · Feb 13, 2023
Elektro Richter · Feb 13, 2023
Elim Clinic · Feb 13, 2023
PFA Systems · Feb 13, 2023
EnCom · Feb 13, 2023
Diethelm Keller Aviation Pte Ltd · Feb 13, 2023
Tonga Communications · Feb 13, 2023

In the newsAll →

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .