THREAT OPS › Threat News › [medusalocker] Twal Family IT Lab posted to leak site
[medusalocker] Twal Family IT Lab posted to leak site
Ransomware group: medusalocker Victim: Twal Family IT Lab Victim website: n/a Sector: Technology Country: n/a Discovered: 2026-08-16T15:21:57.640362+00:00 Leak-site post: http://t33zoj4qwv455fog7qnb2azi5xcdxkixughmmduzbw2rtdgryqfbh6id.onion/company/banajah-bajapah/ Description: Personal IT home lab. AD domain: twalfamily.com. VMware vSphere, multiple AD domains. Daniel Al Twal works at Technology
Indicators of compromise
- http://t33zoj4qwv455fog7qnb2azi5xcdxkixughmmduzbw2rtdgryqfbh6id.onion/company/banajah-bajapah/url