CISA, FBI and Treasury issue advisory on MedusaLocker threat actor under ransomware initiative

An advisory from CISA, the FBI and Treasury Department warns that MedusaLocker ransomware threat actors continue to target victims through vulnerabilities in Remote Desktop Protocol, and offers details on mitigations as part of the federal government’s #StopRansomware initiative

“Observed as recently as May 2022, MedusaLocker actors predominantly rely on vulnerabilities in Remote Desktop Protocol (RDP) to access victims’ networks,” according to the advisory posted Thursday.

MedusaLocker “appears to operate as a Ransomware-as-a-Service (RaaS) model based on the observed split...