Medusa Banking Trojan Returns with New Features, Targets Global Finance
The Medusa (TangleBot) banking Trojan has re-emerged after nearly a year of evading detection, now equipped with new features and a more sophisticated distribution strategy. The malware, which targets financial institutions worldwide, has been identified by Cleafy researchers as operating through five distinct botnets, each focusing on different geographical areas.
The latest Medusa variant boasts new features like full-screen overlay displays and remote uninstallation of applications. It employs 'droppers' to spread malware via fake update procedures, marking a shift in its distribution tactics. The malware communicates with attackers' infrastructure through a secure socket connection, dynamically fetching the command-and-control (C2) server URL from social media profiles such as Telegram and X (formerly Twitter).
Medusa's RAT capabilities enable threat actors to execute on-device fraud, account takeover, and automatic transfer system fraud. The current version of the malware minimizes required permissions and evades detection, allowing it to operate undetected for longer periods. Cleafy researchers have identified a highly structured ransomware group behind the operation, employing multi-stage attack tactics. However, the specific organization or person responsible remains unnamed publicly.
The resurgence of Medusa with enhanced features and distribution strategies underscores the evolving threat landscape in cyber security. As threat actors adapt their tactics, so too must cybersecurity professionals and institutions remain vigilant and proactive in protecting against such sophisticated malware.
Read also:
- Global Content Dissemination Through Cross-Linguistic Voiceovers
- JLR Fights Back After Cyberattack, Secures $7B in Funding, Appoints New CEO
- A2C Teams Up with Privacy4Cars to Strengthen FTC Compliance for Auto Dealers
- Mandated automobile safety technologies in the EU may be deemed "irrational," "erratic," and potentially dangerous, experts caution.
