North Korean Lazarus Group Adopts Medusa Ransomware in Global Attacks

Back Hackread

North Korean Lazarus Group Adopts Medusa Ransomware in Global Attacks

Hackread •Waqas • February 24, 2026

Share: View original

Lazarus Group is now using Medusa ransomware in attacks on healthcare and social services, signaling a move toward profit-focused cybercrime.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

North Korean Lazarus Group Targets US Healthcare with Medusa Ransomware Cybersecurity researchers have identified attacks utilizing Medusa ransomware, attributed to the Lazarus group, a North Korean state-backed hacking operation. These attacks are primarily targeting U.S. healthcare organizations, with the ransomware-as-a-service operation impacting over 300 organizations since its emergence in January 2021, and claiming at least 80 additional victims by February 2025. 20 sources 49

Extracted Entities

APT Groups (1)

Attack Types (1)

Industries (1)

Ransomware Groups (1)