The group has been linked to several major cyberattacks, including the 2014 Sony Pictures hack, several SWIFT banking attacks since 2016 and the WannaCry ransomware infection in May 2017.

The activity of the Lazarus Group surged in 20, where custom-tailored malware was used in its cyberattacks. The Lazarus group have been using this ransomware, which uses methods typical of APT attacks but specialized in financial cybercrime. This is because it tries to change system settings, disable some programs and functions of the target operating systems and demands payment in cryptocurrency via a ransom note dropped during the ransomware execution.

The VHD ransomware is one of the most dangerous threats today.

In this article, we will take a deep dive into a new VHD ransomware distributed in the wild by the Lazarus group - the criminals behind the WannaCry incident in 2017. Data encryption malware is one of the most popular malware families in recent years and targets mass volumes of users and companies around the world.

Malware fox