Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption

The Hacker NewsOctober 27, 2026Threat Intel

The North Korea-linked Lazarus Group has been attributed to a cyber espionage campaign dubbed Operation FlashHole targeting at least three organizations in South Korea spanning the construction, software, and wire-communication equipment manufacturing sectors. According to Russian cybersecurity company Kaspersky, the campaign has been active since at least July 2025. It's assessed to pick up

Summary from The Hacker News.

Read the full article at The Hacker News

Explained

The technology and terms in this story. Learn more

DefencePost-quantum cryptographyNew encryption designed to stay secure once large quantum computers can break today's public-key algorithms.

Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption

Explained

More in Threat Intel

Tricks from the Past deployed via signed ChatGPT and Claude binaries

Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key

Private repos still leak secrets to Gheist, a stolen GitHub token campaign

Australia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected Computers

SANS Stormcast Tuesday, October 27th, 2026: Apple Patches 304 Vulnerabilities Incl. Exploited CoreGraphics Flaw; Threat Hunting in DShield SIEM with ELK; .NET and PHP Brotli Fixes (CVE-2026-111497)