Back Nknews

North Korean hackers deploy new malware to extort US health care sector

Nknews • February 25, 2026

Researchers say Lazarus Group used commercially available ransomware in attacks on targets in Middle East and US

Shreyas Reddy February 25, 2026

North Korean cybercriminals have adopted commercially available malware to expand their extortion campaigns against the U.S. health care sector, according to cybersecurity researchers.

DPRK actors operating under the Lazarus Group umbrella organization used the Medusa ransomware in an attack on a target in the Middle East, U.S. cybersecurity firms Symantec and Carbon Black said in a report Tuesday.

Researchers also observed the same actors launching an unsuccessful attack against a health care organization in the U.S., the report added.

The report said the Medusa attacks are “undoubtedly the work of

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

North Korean Lazarus Group Targets US Healthcare with Medusa Ransomware Cybersecurity researchers have identified attacks utilizing Medusa ransomware, attributed to the Lazarus group, a North Korean state-backed hacking operation. These attacks are primarily targeting U.S. healthcare organizations, with the ransomware-as-a-service operation impacting over 300 organizations since its emergence in January 2021, and claiming at least 80 additional victims by February 2025. 20 sources 49

Extracted Entities

North Korean hackers deploy new malware to extort US health care sector

The full story

Extracted Entities

APT Groups (1)

Attack Types (2)

Ransomware Groups (2)