MITRE ATT&CK / Software / S1220

MEDUSA

ID
S1220
Type
Malware
Platforms
Linux
Source
attack.mitre.org
MITRE last modified
10 Jun 2025

MEDUSA is an open-source rootkit that is capable of dynamic linker hijacking, command execution, and logging credentials.[1]

Techniques used (4)

Groups using it (1)

References

  1. Google Cloud Mandiant UNC3886 2024