RansomwareFinancial
MedUSlocker
MedUSlocker is a ransomware group with a financial motive, tracked by Brandefense. It targets 12 sectors, including Government and Technology, in 21 countries, including the United States and the United Kingdom.
Also known as
- Medusalocker
- Techniques
- 0
- Exploited CVEs
- No CVE data
- First seen
- Nov 15, 2022
- Last seen
- Sep 2, 2026
- Record updated
Who They Target.
Sectors · 12
Countries · 21
About MedUSlocker.
Medusa is a DDoS bot written in.NET 2.0. In its current incarnation its C&C protocol is based on HTTP, while its predecessor made use of IRC.
Last updated Sep 22, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.