[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f8LvbGXAIlXEDzdtzWDaSGAOhUFQTGsYhXOmlYqFha2Q":3},{"article":4,"iocs":43,"watch_terms":48},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":11,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":27},"42350e4f-411d-4bdb-be61-b48e1451f82b","Microsoft links Medusa ransomware affiliate to zero-day attacks","microsoft-links-medusa-ransomware-affiliate-to-zero-day-attacks","Microsoft says that Storm-1175, a China-based financially motivated cybercriminal group known for deploying Medusa ransomware payloads, has been deploying n-day and zero-day exploits in high-velocity attacks. [...]","Microsoft has attributed Storm-1175, a China-based financially motivated cybercriminal group known for Medusa ransomware deployments, to conducting high-velocity attacks using zero-day and n-day exploits. The group is actively exploiting previously unknown vulnerabilities in addition to known vulnerabilities to compromise targets at scale. This represents a significant escalation in the group's capabilities and threat level.","Microsoft links Storm-1175 ransomware group to zero-day exploit attacks.",null,"https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fmicrosoft-links-medusa-ransomware-affiliate-to-zero-day-attacks\u002F","2026-04-06T16:56:01+00:00","2026-04-06T18:00:11.730092+00:00",9,[17,20],{"name":18,"type":19},"Storm-1175","threat_actor",{"name":21,"type":22},"Microsoft","vendor","7d8b5ab8-ea0b-4ced-ae97-ec251b86993a",{"id":23,"icon":11,"name":25,"slug":26},"Ransomware","ransomware",[28,33,38],{"category":29},{"id":30,"icon":11,"name":31,"slug":32},"574f766a-fb3f-487c-8d2c-0720ae75471b","Zero-day","zero-day",{"category":34},{"id":35,"icon":11,"name":36,"slug":37},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":39},{"id":40,"icon":11,"name":41,"slug":42},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[44],{"type":45,"value":46,"context":47},"malware","Medusa","Ransomware payload deployed by Storm-1175",[21]]