In the latest advisory, federal cybersecurity officials urge the public to be cautious against Medusa, a ransomware-as-a-service provider that has already impacted more than 300 people.

Medusa is a ransomware-as-a-service software that uses phishing campaigns to steal victims' credentials and exploit unpatched software vulnerabilities, according to the CISA.