Threat Intelligence / Actor / Lazarus Group / Stonefly (Andariel)

Lazarus Group / Stonefly (Andariel)

Nation: North Korea · 1 tracked threat(s) · Categories: RANSOMWARE

Also known as: Lazarus Group, Stonefly, Andariel, Hidden Cobra, ZINC, Diamond Sleet, Pompilus, Spearwing, DEV-0530, Labyrinth Chollima, Guardians of Peace, NICKEL ACADEMY

Tracked threats

Lazarus Group Medusa Ransomware — North Korean State-Backed Extortion Targeting US Healthcare and Middle East — CRITICAL

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence