FBI, CISA warn 1.8B Gmail accounts at risk from Medusa ransomware

• The FBI and CISA warn that over 1.8 billion Gmail accounts are at risk from Medusa ransomware attacks. The attacks have targeted critical infrastructure sectors, including hospitals, schools and major businesses.
• Medusa ransomware group deceives users with phishing emails, demanding ransom payments ranging from thousands to millions of dollars to release hostage data.
• To protect against these attacks, use two-factor authentication, keep systems and software updated and implement a recovery plan with multiple copies of sensitive data.

---

Full Story

Are you afraid of ghosts? You should be when it comes to your email.

The FBI warns of “ghost attackers.” The ransomware attack threats are reportedly delivered by the United States Postal Service to your Google Gmail account. The FBI warns more than 1.8 billion accounts are at risk.

Who has been affected by the attack?

According to the FBI and the U.S. Cybersecurity and Infrastructure Security Agency, the scheme has been particularly devastating for critical infrastructure sectors, with employees in hospitals, schools and major businesses falling victim to these attacks.

The best way to protect yourself is two-factor authentication. This added layer of protection texts you a security code before logging into your email.

How does the cyberattack work?

The Medusa ransomware group deceives people with fake emails. Once the ransomware is in, private data is taken hostage. Medusa demands a ransom payment of thousands or even millions of dollars to unlock the files and avoid leaking potentially embarrassing information to the public.

So far, the Medusa ransomware group has victimized over 300 targets using phishing scams to exploit unprotected software in users’ digital devices.

“Ransomware operators like Medusa focus on gaining leverage to extort organizations,” Jon Miller, CEO and co-founder of Halcyon, told Forbes, “making critical infrastructure entities prime targets due to their heightened motivation to maintain uninterrupted services.”

Miller added that the groups exploit security gaps, leveraging vulnerabilities to move laterally, escalate privileges, exfiltrate sensitive data and ultimately deploy their payloads. “Once inside a network,” Miller continued, “Medusa employs sophisticated strategies to maximize impact.”