Lazarus advanced persistent threat (APT) group linked to VHD ransomware attacks, Kaspersky research finds.