Compromiseseverity: Critical2017-05-12
WannaCry global ransomware outbreak
published by The White House
Actor
DPRK state-sponsored umbrella set associated with the Reconnaissance General Bureau. Mixes financially-motivated operations (including major cryptocurrency exchange thefts and SWIFT-network bank intr…
Summary
Worm-propagating ransomware leveraging the EternalBlue SMB exploit infected over 200,000 systems in 150+ countries — most notably crippling parts of the UK NHS. The U.S., UK, Australia, and others publicly attributed the outbreak to the DPRK / Lazarus.
Tags
ransomwarewannacryeternalblue
Primary source
trumpwhitehouse.archives.govOther Lazarus Group events
- 2026-04-18Lazarus / TraderTraitor steals $577M from Drift + KelpDAO inside three weeks
- 2025-02-21Lazarus / TraderTraitor executes $1.5B Bybit heist — largest crypto theft in history
- 2024-12-23FBI attributes $308M DMM Bitcoin theft to DPRK TraderTraitor
- 2023-03-293CX Desktop App supply-chain compromise
- 2022-03-29Ronin Network bridge theft (~$620M)