Gmail, Outlook users warned of dangerous threat from Medusa ransomware

nypost.com ^ | March 18, 2025 | Brooke Kato

[V_TWIN]

Users beware: This ransomware poses a threat to precious data.

The FBI has issued a warning regarding malicious malware that demands a ransom from victims in order to release their data.

Dubbed “Medusa,” the “ransomware-as-a-service” has affected more than 300 known people “from a variety of critical infrastructure sectors” since it was first discovered in 2021, according to a recent advisory penned by the Federal Bureau of Investigation, the Cybersecurity and Infrastructure Security Agency and the Multi-State Information Sharing and Analysis Center.

In order to protect themselves, people can follow the agencies’ tips and tricks for securing accounts and personal information to prevent data theft.

For instance, it is recommended that all accounts require password logins that are long and changed regularly, in addition to using multi-factor authentication — ideally using an authenticator app, not text messages — and keeping systems and software updated.

The agencies also advise keeping data and information backed up in another location, such as the cloud or on a hard drive, and encrypted. Additionally, be wary when clicking on links and opening or downloading attachments, especially when received via email or text. Email addresses can be easily spoofed and can look convincingly legit — even if they’re not.

If you accidentally open a link or download a file that proves to be malicious, don’t sweep it under the rug, experts warn.

[JimRed]

I must have been stupid at some point, because my junk mail folder keeps filling up with postmaster notifications that emails I did not send cannot be delivered. I assume that means someone has my contact list and is pretending to be me?

[JimRed]

“Because that is all the video,they could possibly have of an embarrasing situation in my case 😆”

My desktop monitor is so old it does not even have a camera. So I know even if I misbehaved I could safely ignore those messages!

[Gideon7]

If they stole your phone, then they also have access to your authentication App.

Authentication apps require that you turn on biometric authentication (face, fingerprint, etc).

They sometimes let you fall back to using a PIN, but I don't recommend it.

[Bob434]

lol that’s pretty old-

[Bob434]

ohj i don’t know- i meant on a desktop computer- i have an android tablet, but don’t even know how to right click with that lol

[Grampa Dave]

This extorction attempt was in my morning email:

“Your free trial has ended.

Take action now to keep what you built.

Time has run out, and your free trial is over. After 30 days, your work may be deleted. Activate your full account now to keep what you built and gain full access to Google Cloud.