New StormEncryptor ransomware used by former Medusa affiliate

New StormEncryptor ransomware used by former Medusa affiliate

A financially motivated threat actor previously associated with the Medusa ransomware operation is now deploying a new ransomware strain called StormEncryptor. [...]

Baffling: China-Linked Group Unleashes New StormEncryptor Ransomware via RMM Exploit

You know, in the ever-escalating arms race between cyber defenders and attackers, it sometimes feels like we’re constantly playing a grim game of ‘whack-a-mole.’ Just when you think you’ve got a handle on one threat, another, more sophisticated one pops up. That’s precisely the unsettling feeling many in the cybersecurity community are experiencing right now, thanks to a recent revelation from Microsoft. It turns out that a financially motivated…

China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flaw | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #ransomware - National Cyber Security Consulting

Ravie LakshmananAug 10, 2026Ransomware / Cybercrime Microsoft has disclosed that Storm-1175, a financially motivated threat actor linked to China, has deployed a previously undocumented ransomware strain called StormEncryptor. The use of StormEncryptor marks a shift from the adversary's previous use of Medusa ransomware, the Microsoft Threat Intelligence Team said. "StormEncryptor is written in C++ and […] Thank you for subscribing to our RSS …

China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flaw

Microsoft has disclosed that Storm-1175, a financially motivated threat actor linked to China, has deployed a previously undocumented ransomware strain called StormEncryptor. The use of StormEncryptor marks a shift from the adversary's previous use of Medusa ransomware, the Microsoft Threat Intelligence Team said. "StormEncryptor is written in C++ and appends the file name extension .encrypted

China-linked hackers turning popular cybersecurity tool into ransomware launchpad, Microsoft warns

A China-linked threat actor is believed to be exploiting a critical vulnerability affecting cybersecurity software from the company N-able.