A new ransomware strain named Medusa is actively exploiting a critical vulnerability in Fortra's GoAnywhere managed file transfer software. This flaw allows attackers to execute arbitrary code remotely, leading to potential ransomware deployment and data encryption on affected systems. Organizations using GoAnywhere are urged to apply the latest security patches immediately to mitigate this threat. The Medusa ransomware campaign highlights the increasing trend of threat actors targeting enterprise file transfer solutions to gain initial access and deploy ransomware payloads. Security teams should enhance monitoring for suspicious activity related to GoAnywhere and implement robust backup and recovery strategies to minimize impact. This incident underscores the importance of timely patch management and proactive threat intelligence in defending against ransomware attacks exploiting software vulnerabilities.
This Cyber News was published on www.darkreading.com. Publication date: Tue, 07 Oct 2025 17:40:06 +0000