medusalocker
ACTIVEransomware group
Medusa is a DDoS bot written in .NET 2.0. In its current incarnation its C&C protocol is based on HTTP, while its predecessor made use of IRC.
Group Activity
Last 12 monthsVictims (99)
PKSF — Palli Karma-Sahayak Foundation
Organization with 13 emails extracted. Domain: 08trl.exit
Juntadeandalucia
Organization with 198 emails extracted. Domain: juntadeandalucia.es
Premiumfruits
Organization with 3292 emails extracted. Domain: premiumfruits.eu
ATCO Ltd
Organization with 80 emails extracted. Domain: mail.gmail.com
Aokkef
Organization with 137 emails extracted. Domain: aokkef.fr
Seznam
Organization with 115 emails extracted. Domain: seznam.cz
Abv
Organization with 583 emails extracted. Domain: abv.bg | Sofia, Bulgaria
瑞祥机电 (Ruixiang Jidian)
Elevator manufacturer, brand 银海 (Yinhai). Produces machine-room-less (MRL) passenger elevators and OEMs elevator components (car top/bottom, car wall panels, CO...
Abourametals
Organization with 25448 emails extracted. Domain: abourametals.com
Frisby Roofing (Frisby Construction LLC)
Residential roofing contractor (family-owned, locally operated). Complete roof tear-off and replacement, dimensional shingles (CertainTeed, Tamko Heritage, GAF)...
Praveg Caves Jawai
Luxury safari resort near Jawai leopard reserve, Sumerpur (Pali), Rajasthan, India (phone +91 777 908 4007). Runs IDS Fortune V5 hotel PMS/POS (customer code 94...
Licindia
Organization with 9 emails extracted. Domain: licindia.com
Lawter
Organization with 150 emails extracted. Domain: lawter.com
Jgsee
Organization with 4 emails extracted. Domain: jgsee.kmutt.ac.th
Servifruit
Organization with 195 emails extracted. Domain: servifruit.com
Hungry Lion
Fast food franchise (burgers, chicken, chips, ice cream) - 111 locations across South Africa, Botswana, Namibia, Zambia, Zimbabwe, Lesotho, Mauritius. Three POS...
Qualisteel
Organization with 7568 emails extracted. Domain: qualisteel.com
Health
Organization with 103 emails extracted. Domain: health.nsw.gov.au
Twal Family IT Lab
Personal IT home lab. AD domain: twalfamily.com. VMware vSphere, multiple AD domains. Daniel Al Twal works at Technology North Corp (Edmonton), former DND co-op...
All Parts Dry Cleaning
Dry cleaning & laundry. Domain: allpartsdrycleaning.co.uk. | United Kingdom
Idex Group
Organization with 30 emails extracted. Domain: idex-group.com
Bija Industrie
Organization with 693 emails extracted. Domain: bija-industrie.com
Thecourierguy
Organization with 2018 emails extracted. Domain: thecourierguy.co.za
Forces
Organization with 28 emails extracted. Domain: ***.gc.ca
Estrela
Organization with 11 emails extracted. Domain: estrela.ind
Karneslegal
Organization with 23 emails extracted. Domain: karneslegal.com
Sgs Gmbh
Organization with 933 emails extracted. Domain: sgs-gmbh.com
Dadolighting
Organization with 17 emails extracted. Domain: dadolighting.com
T Online
Organization with 823 emails extracted. Domain: t-online.de
FunkeScheid
Notarkanzlei FunkeScheid, Kanzlei im Ostend, Frankfurt. 9755 emails. AD: Kanzlei.FunkeScheid.com
Mairie Thiverval Grignon
Organization with 162 emails extracted. Domain: mairie-thiverval-grignon.fr
Dolrad
Organization with 69 emails extracted. Domain: dolrad.ae
Penticton and District Society for Community Living
Canadian charity providing disability-related services. CRA Registration: 119090686RR0001 | Penticton, British Columbia, Canada
Elken Sdn Bhd
MLM / health & beauty products company. ~16k emails extracted.
Bandeirante Supermercados
Brazilian supermarket chain.
Strategic Imports
Australian auto parts/batteries importer. Brands: Strategic Imports, Auto Parts Now, Discount Batteries Now. User: bstuart (Brad Stuart). QNAP NAS (CACHEDEV1_DA...
Magnolia (Israel)
Israeli jewelry company. Silver & accessories, participates in Vicenza jewelry fair (2025/2026). Sells via buyme.co.il gift cards. ~38k files, invoices in Hebre...
Trimble Inc / Gerrard Inc
Technology company Trimble (trimble.com) and Gerrard Inc (gerrardinc.com). ~18 Trimble email addresses.
Atencio Engineering
Civil engineering & land surveying firm. Services: site plans, boundary surveys, OWTS (septic) design, fire line design, elevation certificates, flood plain ana...
SIT Group / Robusta
Italian company SIT Group (sitgroup.it) and Bulgarian Robusta (robusta.bg). Also abv.bg emails.
Desert Christian Schools
K-12 Christian school affiliated with First Baptist Church of Lancaster, CA. ADP payroll, DCFS childcare program, City of Lancaster Water Safety program. Financ...
CourtSmart
Court technology company. Domain courtsmart.com / COURTSMART2. Dev server: dev-rich20.courtsmart.com. Connections to JIS.org, nashville.org.
Hathcock (Personal)
Personal comprehensive reports. Individuals: Noel Ray Hathcock, Trinity John Hathcock.
ActionAid / TACOSA
NGO sector. Domains: actionaid.org, tacosa.org.za, immigration.go.tz.
Palmers Relocations
Australian international removals & relocation company. FIDI accredited, ISO 9001:2015 certified. Services: household moves, storage, customs, immigration (IMMI...
Académie de Montpellier / CSJM
French public school network. Domain CSJM.BEZIERS, part of Académie de Montpellier (ac-montpellier.fr). Occitanie region (laregion.fr). Teacher and admin staff ...
Colegio María Inmaculada
Catholic school in Moravia, Costa Rica. Domain cmi.local / mariainmaculada.ed.cr. Servers: CMI-DC01, CMI-APP, CMI-HTTP2, main-server1/2.
CEAGESP / Netfeirasp
Brazilian produce wholesale market network. Domain netfeirasp.ceagesp (CEAGESP). Also demarchibrasil.com.br accounts.
Raycolighting
Organization with 2 emails extracted. Domain: raycolighting.com
dulay.ca
Price-$40000 (sale in one hand there are options for making a profit from these files will be included in the deal) 500Gb
Infrastructure
http://t33zoj4qwv455fog7qnb2azi5xcdxkixughmmduzbw2rtdgryqfbh6id.onion/886ms
19m ago
unreachable
https://qd7pcafncosqfqu3ha6fcx4h6sr7tzwagzpcdcnytiw3b6varaeqv5yd.onion3124ms
3h ago
unreachable
http://medusaxko7jxtrojdkxo66j7ck4q5tgktf7uqsqyfry4ebnxlcbkccyd.onion/2637ms
3h ago
unreachable
http://z6wkgghtoawog5noty5nxulmmt2zs7c3yvwr22v4czbffdoly2kl4uad.onion/2597ms
3h ago