THREAT OPS › Threat News › [medusalocker] Thecourierguy posted to leak site
[medusalocker] Thecourierguy posted to leak site
Ransomware group: medusalocker Victim: Thecourierguy Victim website: thecourierguy.co.za Sector: Transportation Country: ZA Discovered: 2026-08-16T15:19:49.865704+00:00 Leak-site post: http://t33zoj4qwv455fog7qnb2azi5xcdxkixughmmduzbw2rtdgryqfbh6id.onion/company/bamasah/ Description: Organization with 2018 emails extracted. Domain: thecourierguy.co.za Note: leak-site listings typically precede pub
Indicators of compromise
- thecourierguy.co.zadomain
- http://t33zoj4qwv455fog7qnb2azi5xcdxkixughmmduzbw2rtdgryqfbh6id.onion/company/bamasah/url