Signal
Lazarus Group Uses Medusa Ransomware in Middle East and U.S. Healthcare Attacks
Evidence first: scan the strongest sources, then decide whether to go deeper.
Published 2026-02-24 11:00 UTCUpdated 2026-02-24 14:30 UTC
rss
north_korean_lazarus
Source links open
Source links and full evidence are open here. Pro adds archive history, compare-over-time, alerts, exports, and workflow. Business adds Feed API integrations and team usage.
No card needed for the free brief.
Evidence trail (top sources)
top sources (4 domains)domains are deduped. counts indicate coverage, not truth.4 top sources shown
Overview
Report: Lazarus Group Pivoting to Medusa Ransomware for Extortion Attacks North Korean-state backed Lazarus Group hackers are using Medusa ransomware in extortion attacks on U.S. healthcare entities despite a 2024 U.S. indictment of Rim Jong Hyok, an alleged member of the Lazarus subgroup Stonefly, according to a...
Score total
1.75
Momentum 24h
6
Evidence documents
-
Independent publishers
-
Independent origins
-
Primary sources
-
Secondary sources
-
Source types
-
Duplicate ratio
0%
All evidence
All evidence
North Korean Lazarus Group Expands Ransomware Activity With Medusa
Infosecurity Magazine · infosecurity-magazine.com · 2026-02-24 14:30 UTC
Lazarus hackers adopt Medusa ransomware for extortion campaigns, targeting healthcare and nonprofits
Databreaches · databreaches.net · 2026-02-24 14:12 UTC
North Korean Hackers Continue to Target US Healthcare
Bankinfosecurity · bankinfosecurity.com · 2026-02-24 13:17 UTC
Lazarus Group Uses Medusa Ransomware in Middle East and U.S. Healthcare Attacks
Thehackernews · thehackernews.com · 2026-02-24 11:52 UTC
North Korean state hackers seen using Medusa ransomware in attacks on US, Middle East
Therecord · therecord.media · 2026-02-24 11:27 UTC
North Korean Lazarus group linked to Medusa ransomware attacks
BleepingComputer · bleepingcomputer.com · 2026-02-24 11:00 UTC
Show filters & breakdown
Posts loaded: 0Publishers: 6Origin domains: 6Duplicates: -
Showing 6 / 6
Top publishers (this list)
- Infosecurity Magazine (1)
- Databreaches (1)
- Bankinfosecurity (1)
- Thehackernews (1)
- Therecord (1)
- BleepingComputer (1)
Top origin domains (this list)
- infosecurity-magazine.com (1)
- databreaches.net (1)
- bankinfosecurity.com (1)
- thehackernews.com (1)
- therecord.media (1)
- bleepingcomputer.com (1)