Microsoft Warns Storm-1175 Uses 0-Day for Medusa

Microsoft warns that a financially motivated threat group, Storm-1175, is exploiting zero-day flaws in internet-facing assets to launch Medusa ransomware attacks. These high-paced intrusions can incapacitate organizations within 24 hours, taking advantage of newly disclosed software vulnerabilities before they are patched. The group targets unpatched “N-day” vulnerabilities and also exploits zero-day flaws, highlighting a sophisticated attack strategy. Storm-1175’s technique involves penetrating systems using methods such as remote access payloads and compromising high-privilege accounts. They deploy the Medusa ransomware after gathering sensitive data and manipulating digital defenses. Industries relying on web-exposed platforms face significant risks. Security experts urge immediate patching, within 72 hours for listed vulnerabilities, and advocate restricting remote monitoring tools. Multi-factor authentication on privileged accounts and regular audits of security configurations are crucial defenses. Microsoft warns Storm-1175 represents a persistent threat, and swift action from organizations is critical to mitigate risks. For further details, read the full official news article here:

Microsoft Warns Storm-1175 Exploits Web-Facing Assets 0-Day Flaws in Medusa Ransomware Attacks