SecurityBleepingComputerabout 4 hours ago
New StormEncryptor ransomware used by former Medusa affiliate
1 min read
Microsoft tracks China-based threat actor Storm-1175 deploying new C++ ransomware StormEncryptor, a shift from Medusa. Attacks likely exploited N-able N-central flaw CVE-2026-18577. The malware appends.encrypted and drops!!!README_FIRST!!!.txt, giving victims three days before data leaks.
Level
Hype check
Tap to vote and see what everyone thinks.
How outlets covered it
The Record leads with the China-linked hacking and Microsoft warning, while BleepingComputer focuses on the new StormEncryptor ransomware and its Medusa affiliate origin.
Summary by ByteBrief
