Lazarus tools overlap with ransomware attacks

South Korean agencies warned that tools and infrastructure used by North Korea's Lazarus Group appear to have been shared with Gunra ransomware operators targeting Korean organisations. AhnLab found overlaps in malware filenames, privilege-escalation tools, command-and-control servers and SSH key fingerprints, after Lazarus installed espionage backdoors in at least 72 organisations this year.

Source: The Record