Medusa RaaS employs a double extortion product, in which victims should spend [T1657] to decrypt files and prevent further launch. The ransom Observe demands victims make Get in touch with within just 48 several hours by way of possibly a Tor browser primarily based Reside chat, or through Tox, an stop-to-conclude encrypted fast-messaging platform.