Gangs
A

Ako

Inactive

Total victims

0

This month

0

Active

—

Traceable ransom payments: at least $33.442 (12 transactions, son kayıt 2020). Covers only reported crypto wallets; actual revenue is higher. Source: ransomwhe.re

DayBreach AI intelligence

Gang profile and current news · from web sources

Loading…

How it operates

A Windows ransomware that will run certain tasks to prepare the target system for the encryption of files. MedusaLocker avoids executable files, probably to avoid rendering the targeted system unusable for paying the ransom. It uses a combination of AES and RSA-2048, and reportedly appends extensions such as .encrypted, .bomber, .boroff, .breakingbad, .locker16, .newlock, .nlocker, and .skynet.