Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption

The North Korea-linked Lazarus Group has been attributed to Operation FlashHole, a cyber espionage campaign targeting at least three South Korean organizations in construction, software, and wire-communication equipment manufacturing. According to Kaspersky, the campaign has been active since at least July 2025 and uses post-quantum encryption to deploy malware.