INCIDENT EVIDENCE GRAPH

New StormEncryptor ransomware used by former Medusa affiliate

2026-08-10T17:42:00Z

A financially motivated threat actor previously associated with the Medusa ransomware operation is now deploying a new ransomware strain called StormEncryptor. [...]

• Actor: financially motivated threat actor previously associated with Medusa
• Method: deploying a new ransomware strain

Primary evidence

1. New StormEncryptor ransomware used by former Medusa affiliate

中文