lazarus.day
Actors
Reports
Incidents
IoCs
Analytics
Actors
Reports
Incidents
IoCs
Support
Lazarus_TSMSISrv_IME_Loader
YARA Rule
First Seen: 2026-03-17
Last Seen: 2026-03-17
Share:
1
Related Reports
0
Related IOCs
Related Reports
2026-03-17
Break Glass Intelligence
When Nation-States Become Ransomware Affiliates: Lazarus Group Deploys Medusa via a Custom IME-Based Loader
#Lazarus
#Medusa
#Ransomware
#T1574.002
#T1562.001
#T1059.001
#T1490
#T1555
#T1486
#T1547.014
#T1129
#T1036.005
#T1622
#T1135
#T1027.002
#T1546.015
#T1489
#T1082
« Back
⚠ These IoCs were automatically extracted using regular expressions or an LLM and may include non-malicious data.