Lazarus Group Picks a New Poison: Medusa Ransomware

By Rob Wright

AI Summary

North Korean Lazarus Group has been observed deploying Medusa ransomware in attacks against U.S. healthcare organizations and Middle Eastern entities. The threat actors also used Comebacker backdoor, Blindingcan RAT, and Infohook stealer to establish persistence and exfiltrate data from compromised networks.

Read full article → https://www.darkreading.com/cyberattacks-data-brea…

Relevance score: 90.0/100

# More from February 25

1
Ex-L3Harris executive sentenced to 87 months in prison for selling zero-day exploits to Russian broker CyberScoop
2
Attackers Now Need Just 29 Minutes to Own a Network Dark Reading
3
Critical SolarWinds Serv-U flaws offer root access to servers BleepingComputer
4
RoguePilot Flaw in GitHub Codespaces Enabled Copilot to Leak GITHUB_TOKEN The Hacker News
6
Phishing campaign targets freight and logistics orgs in the US, Europe BleepingComputer
7
CarGurus data breach exposes information of 12.4 million accounts BleepingComputer
8
Wynn Resorts confirms employee data breach after extortion threat BleepingComputer
9
UK fines Reddit $19 million for using children’s data unlawfully BleepingComputer
10
Anthropic Says Chinese AI Firms Used 16 Million Claude Queries to Copy Model The Hacker News