THREAT OPS › Threat News › [medusalocker] Lawter posted to leak site
[medusalocker] Lawter posted to leak site
Ransomware group: medusalocker Victim: Lawter Victim website: lawter.com Sector: Manufacturing Country: US Discovered: 2026-09-01T04:27:28.960315+00:00 Leak-site post: http://t33zoj4qwv455fog7qnb2azi5xcdxkixughmmduzbw2rtdgryqfbh6id.onion/company/baoatah/ Description: Organization with 150 emails extracted. Domain: lawter.com Note: leak-site listings typically precede public disclosure.
Indicators of compromise
- lawter.comdomain
- http://t33zoj4qwv455fog7qnb2azi5xcdxkixughmmduzbw2rtdgryqfbh6id.onion/company/baoatah/url