ZeroHour

medusa

Ransomware / extortion group tracked from leak-site posts

Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
0
All-time (tracked)
530since 2023-02-13
Last post
04-26 16:15UTC
Estimated earnings
public reporting
Profile not written yet: the pipeline profiles the most active groups first, a few per run.

Leak-site victims

VictimDiscoveredDetails
McCray & Withrow · Nov 17, 2023
Toyota Financial · Nov 16, 2023
Moneris Solutions · Nov 13, 2023
Hopewell Area School District · Nov 7, 2023
Weidmann & Associates · Nov 5, 2023
Unimed Blumenau · Nov 5, 2023
Leaguers · Nov 5, 2023
Zon Beachside · Nov 5, 2023
Canadian Psychological Association · Nov 5, 2023
Software Systems · Nov 1, 2023
Mount Carmel Care Center · Oct 31, 2023
Jockey Club · Oct 30, 2023
Safpro · Oct 23, 2023
EHPAD · Oct 23, 2023
Beaver Lake Cree Nation · Oct 23, 2023
Native Counselling Services of Alberta · Oct 23, 2023
Believe Productions · Oct 16, 2023
ATI Traduction · Oct 16, 2023
EDB · Oct 16, 2023
Global Product Sales · Oct 16, 2023
Symposia Organizzazione Congressi S.R.L · Oct 16, 2023
Neodata · Oct 12, 2023
Evasión · Oct 12, 2023
SIMTA · Oct 12, 2023
ZOUARY & Associés · Oct 12, 2023
Agència Catalana de Notícies (ACN) · Oct 6, 2023
Somagic · Oct 3, 2023
Windak · Oct 2, 2023
Karam Chand Thapar & Bros Coal Sales · Oct 2, 2023
Acoustic Center · Sep 27, 2023
LANDSTAR POWER ONTARIO INC · Sep 27, 2023
Franktronics, Inc · Sep 23, 2023
Philippine Health Insurance · Sep 23, 2023
Chait · Sep 20, 2023
Gulf American Lines · Sep 20, 2023
Auckland Transport · Sep 18, 2023
Wave Hill · Sep 11, 2023
Steripharma · Sep 11, 2023
Betton France · Sep 4, 2023
Jules B · Sep 4, 2023
Aranui Cruises · Aug 30, 2023
Skynet · Aug 30, 2023
LEN Italia · Aug 25, 2023
Durham Fasteners · Aug 25, 2023
Axis Elevators · Aug 25, 2023
Novi Pazar put ad · Aug 20, 2023
The International Civil Defense Organization · Aug 20, 2023
Sartrouville France · Aug 20, 2023
Postel SpA · Aug 15, 2023
CB Energy Australlia · Aug 14, 2023

In the newsAll →

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .