TLDR Tech / InfoSec
North Korea's Lazarus Group sharing tools with ransomware hackers, South Korean agencies warn
AhnLab's "Operation Double Barrel" report found Lazarus and the Gunra ransomware group exploiting identical vulnerabilities in mandatory Korean financial security software, sharing malware filenames, C2 servers, and SSH key fingerprints while running parallel espionage (72+ organizations breached) and extortion campaigns across South Korea from 2025 into 2026.
Read the full story