Security News Hackers Repurpose RansomHub's EDRKillShifter in Medusa, BianLian, and Play Attacks TheHackerNews Daniel Bender Mar 27, 2025 RansomHub's EDRKillShifter used in 2024 ransomware by Medusa, BianLian, and Play, revealing cross-gang tool sharing.