Researchers have identified servers of the Medusa Ransomware Group, revealing their IP address through a vulnerability in their blog platform. Active since 2019, Medusa has targeted healthcare, education, and manufacturing sectors, employing double-extortion tactics. The compromised server, hosted in Russia, displayed poor security configurations, leading to its deanonymization despite operating within Tor’s protections.

IPVanish’s malware protection confirmed among the best on the market
IPVanish’s malware and tracker blocking technology is among the best in the market, according to independent auditors. VIPRE Advanced Security, the service fuelling IPVanish, received