Back Securityaffairs.Co

Lazarus APT group deployed Medusa Ransomware against Middle East target

Securityaffairs.Co •Pierluigi Paganini • February 25, 2026

North Korea’s Lazarus Group used Medusa ransomware in an attack on an unnamed Middle East organization, researchers report. The North Korea-linked Lazarus APT Group, also known as Diamond Sleet and Pompilus, has been spotted deploying Medusa ransomware against an unnamed organization in the Middle East, according a new report from the Symantec and Carbon Black […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

North Korean Lazarus Group Targets US Healthcare with Medusa Ransomware Cybersecurity researchers have identified attacks utilizing Medusa ransomware, attributed to the Lazarus group, a North Korean state-backed hacking operation. These attacks are primarily targeting U.S. healthcare organizations, with the ransomware-as-a-service operation impacting over 300 organizations since its emergence in January 2021, and claiming at least 80 additional victims by February 2025. 20 sources 49

Extracted Entities

Lazarus APT group deployed Medusa Ransomware against Middle East target

The full story

Extracted Entities

APT Groups (4)

Attack Types (1)

Countries (1)

Ransomware Groups (1)