Kaspersky researchers have linked North Korea's Lazarus Group to a new espionage campaign, tracked as Operation FlashHole, that has been hitting South Korean organizations in construction, software, and telecom equipment manufacturing since at least mid-2025. The attackers reportedly abused legitimate South Korean security software to slip malware onto target networks, and notably used post-quantum encryption to protect their payloads from inspection. The campaign underscores how state-backed hacking crews are adopting forward-looking cryptography even for routine malware delivery.
// source: thehackernews.com ↗