NORTH KOREA'S LAZARUS GROUP SHARING TOOLS WITH RANSOMWARE HACKERS, SOUTH KOREAN AGENCIES WARN

Summary from the TLDR InfoSec newsletter

AhnLab's "Operation Double Barrel" report found Lazarus and the Gunra ransomware group exploiting identical vulnerabilities in mandatory Korean financial security software, sharing malware filenames, C2 servers, and SSH key fingerprints while running parallel espionage (72+ organizations breached) and extortion campaigns across South Korea from 2025 into 2026.