Lazarus shares tools with ransomware hackers

North Korea's Lazarus Group shared cyberattack tools and infrastructure with the Gunra ransomware scheme, according to AhnLab and South Korean agencies. Both groups exploited identical vulnerabilities, malware filenames, command-and-control servers, and SSH key fingerprints against South Korean targets from 2025 through early 2026.