Lazarus hackers adopt Medusa ransomware for extortion campaigns, targeting healthcare and nonprofits

Symantec and Carbon Black Threat Hunter teams report evidence that North Korea–linked Lazarus Group is leveraging Medusa ransomware in ongoing extortion operations, with a confirmed Middle East victim and a thwarted attempt against a U.S. healthcare organization, signaling continued ransomware campaigns against healthcare and nonprofit targets despite prior U.S. indictments.