Google security researcher Neel Mehta tweeted a wordless tweet about the WannaCry outbreak. It contained hashes for two malware samples along with line markers where parts of their codes were identical. The code comparison suggests that whoever created the malware used some of the same code as the Lazarus Group. Investigators are probing for a stronger connection, but it’s a tantalizing clue in an already remarkable incident. Kaspersky Lab doubts it’s an attempt at deception in the case of a false flag.”]
Source: https://www.cuinfosecurity.com/wannacry-first-nation-state-ransomware-a-9922