HIGHRansomware
Global

Storm-1175 Exploits Flaws in High-Velocity Medusa Attacks

Tuesday, April 7, 2026 at 10:02 AM UTC·Source: Infosecurity Magazine

Updated: Tuesday, April 7, 2026 at 10:09 AM UTC

Executive Summary

Microsoft has released a new report about the Storm-1175 group and its connection to Medusa ransomware

Analysis

Microsoft has released a new report about the Storm-1175 group and its connection to Medusa ransomware
Source Attribution

Originally published by Infosecurity Magazine on Apr 7, 2026.

Related Threats

HIGHRansomwareNEW

Talos Takes: 2025's ransomware trends and zombie vulnerabilities

In this episode of Talos Takes, Amy and Pierre Cadieux unpack the ransomware and vulnerability trends that defined 2025.

Cisco Talos
CRITICALRansomware

Medusa Ransomware Fast to Exploit Vulnerabilities, Breached Systems

The group is using zero-days, quickly weaponizes fresh bugs, and exfiltrates and encrypts data within days of initial access. The post Medusa Ransomware Fast to Exploit Vulnerabilities, Breached Systems appeared first on SecurityWeek .

SecurityWeek
CRITICALRansomware

Microsoft says Medusa-linked Storm-1175 is speeding ransomware attacks

Microsoft has warned that Storm-1175, a cybercrime group linked to Medusa ransomware, is exploiting vulnerable web-facing systems in fast-moving attacks, at times moving from initial access to data theft and ransomware deployment within 24 hours. The company said the group has heavily targeted organizations in healthcare, education, professional services, and finance across Australia, the UK, and

CSO Online