Security News Hackers Repurpose RansomHub's EDRKillShifter in Medusa, BianLian, and Play Attacks TheHackerNews Daniel Bender 27 Mar 2025 RansomHub's EDRKillShifter used in 2024 ransomware by Medusa, BianLian, and Play, revealing cross-gang tool sharing.