RansomwareTargets Brazil

medusalocker

E-mail alert on newly attributed CVEs, new victims in Brazil and verified incidents.

About the group

Medusa is a DDoS bot written in .NET 2.0. In its current incarnation its C&C protocol is based on HTTP, while its predecessor made use of IRC.

Exploited vulnerabilities

No CVEs attributed to this group in public sources (MITRE ATT&CK). Absence of attribution does not mean absence of activity.

Impact and victims

The group medusalocker has 5 known ransomware victims. See the most affected sectors and countries and recent victims.

5known victims
5in Brazil
4sectors hit
Activity (12 months)
05
07
10
11
Most attacked sectors
Retail & E-Commerce2
Agriculture and Food Production1
Manufacturing1
Technology1
Most affected countries
🇧🇷 Brasil5
Recent victims
Interativa Plasticos (Interplast)Manufacturing · BR · 2026-11-04
MillensysTechnology · BR · 2026-10-05
EstrelaRetail & E-Commerce · BR · 2026-07-01
Bandeirante SupermercadosRetail & E-Commerce · BR · 2026-05-05
CEAGESP / NetfeiraspAgriculture and Food Production · BR · 2026-05-05

medusalocker uses real techniques and exploits real flaws. TrueHacking's AI Autonomous Pentest simulates these attacks against your infrastructure and brings more security to your application.

Explore the AI Autonomous Pentest →