North Korean hacking group behind WannaCry apparently expanding into ransomware, Kaspersky says. Lazarus Group has also carried out online bank and cryptocurrency heists on behalf of the government of North Korea. VHD Ransomware appears to be the work of the Lazarus Group, the security firm says. The VHD ransomware can move laterally through infected networks before delivering the final payload to encrypt files, the report says. At least one of the attacks happened in Europe, but it did not describe how it came across these two incidents.”]
Source: https://www.cuinfosecurity.com/lazarus-group-reportedly-now-wielding-ransomware-a-14731