Lazarus Group Exploits South Korean Security Software for Malware Deployment via Post-Quantum Encryption

The Lazarus Group launched Operation FlashHole, a cyber espionage campaign targeting South Korean organizations in construction, software, and wire-communication sectors using post-quantum encryption. The campaign, active since July 2025, leverages compromised security software for malware deployment.

The North Korea-linked Lazarus Group has been attributed to a cyber espionage campaign dubbed Operation FlashHole targeting at least three organizations in South Korea spanning the construction, software, and wire-communication equipment manufacturing sectors.

According to Russian cybersecurity company Kaspersky, the campaign has been active since at least July 2025. It's assessed to pick up

Read original article