Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption

MediumThe Hacker News · info@thehackernews.com (The Hacker News)·

At a glance

Severity
Medium
Used in attacks
No flaws named
Hacker groups and malware
Lazarus
Industries
Manufacturing
Reported by
1 outlet

The North Korea-linked Lazarus Group has been attributed to a cyber espionage campaign dubbed Operation FlashHole targeting at least three organizations in South Korea spanning the construction, software, and wire-communication equipment manufacturing sectors. According to Russian cybersecurity company Kaspersky, the campaign has been active since at least July 2025. It's assessed to pick up…

We summarise and link; this source is not one we hold a licence to reproduce. Everything below is what CyberBrief adds: the vulnerabilities involved, whether they are being exploited, who is named, and who else covered it.

Fastnexa security experts

Worried Lazarus could come after your company?

We test your defences the way groups like Lazarus actually break in, then help you close the gaps before they find them.

Book a 30-min callWhatsApp us

Think you’ve already been hit? Don’t wait on a form: call or WhatsApp +1 (732) 454 2616. We reply within 1 hour, 24/7. Emergency help →

Coverage

One outlet has carried this so far.

  1. The Hacker News ↗Established SourceFirst reported

    2026-10-27 11:32 UTC

Related stories