
The boundary between sovereign state operations and illicit street-level cybercrime has effectively dissolved as North Korea’s most notorious hacking collective adopts the tools of private extortionists. This evolution represents a departure from traditional intelligence gathering, moving the Lazarus Group into the realm of Ransomware-as-a-Service. By leveraging the Medusa ransomware strain, these actors are no longer just seeking classified documents; they










