Medusa

A ransomware and double-extortion operation active since 2021, with a public leak site established later. It targets organizations across sectors through compromised credentials, exposed services, and vulnerability exploitation, then steals data and encrypts systems.