Medusa Ransomware Uses Malicious Driver to Disable Anti-Malware with Stolen Certificates

Researchers at Elastic Security Labs observed a Medusa ransomware attack that delivered the encryptor by means of a loader packed using a packer-as-a-service (PaaS) called HeartCrypt.