Lazarus APT group deployed Medusa Ransomware against Middle East target

North Korea-linked Lazarus APT has been observed deploying Medusa ransomware (a 2023 RaaS) against an unnamed Middle East organization and attempting an attack on a U.S. healthcare entity; Symantec and Carbon Black report overlaps in tooling and provide IoCs linking the activity to Lazarus subgroups such as Stonefly/Andariel, noting a shift toward ransomware-driven extortion and continued financially motivated intrusions.