1、 To report suspicious or criminal activity related to information found in this joint Cybersecurity Advisory,contact your local FBI field office or CISAs 24/7 Operations Center at Reportcisa.gov or(888)282-0870.When available,please include the following information regarding the incident:date,time,

2、and location of the incident;type of activity;number of people affected;type of equipment used for the activity;the name of the submitting company or organization;and a designated point of contact.SLTT organizations should report incidents to MS-ISAC(866-787-4722 or SOCcisecurity.org).This document

3、is distributed as TLP:CLEAR.Disclosure is not limited.Sources may use TLP:CLEAR when information carries minimal or no foreseeable risk of misuse,in accordance with applicable rules and procedures for public release.Subject to standard copyright rules,TLP:CLEAR information may be distributed without

4、 restriction.For more information on the Traffic Light Protocol,see cisa.gov/tlp.TLP:CLEARTLP:CLEAR TLP:CLEAR Co-Authored by:Product ID:AA25-071A#StopRansomware:Medusa Ransomware Summary Note:Note:This joint Cybersecurity Advisory is part of an ongoing#StopRansomware effort to publish advisories for

5、 network defenders detailing various ransomware variants and ransomware threat actors.These#StopRansomware advisories include recently and historically observed tactics,techniques,and procedures(TTPs)and indicators of compromise(IOCs)to help organizations protect against ransomware.Visit stopransomw

6、are.gov to see all#StopRansomware advisories and to learn more about other ransomware threats and no-cost resources.The Federal Bureau of Investigation(FBI),Cybersecurity and Infrastructure Security Agency(CISA),and the Multi-State Information Sharing and Analysis Center(MS-ISAC)are releasing this j