AhnLab Found Shared Malware, SSH Keys and Infrastructure Across Two Campaigns Shared malware, infrastructure and access methods link Lazarus Group to Gunra ransomware activity, while former North Korean military hackers allegedly used state-trained skills to steal bank funds, exposing cyber capability diffusion and blowback inside the regime.