The North Korea-linked Lazarus Group is behind a cyber espionage campaign named Operation FlashHole, targeting at least three organizations in South Korea. These sectors include construction, software, and wire-communication equipment manufacturing.
Russian cybersecurity company Kaspersky reported that this campaign has been active since at least July 2025. The group is noted for using post-quantum encryption to deploy malware.
Sources and references
Original report
Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption
The Hacker News
Read on The Hacker News (opens in a new tab)Ref 00JOLQX1
Cite this
APA
Interestana AI Editorial. (2026, October 27). Lazarus Group Uses Post-Quantum Encryption in Cyber Espionage. Interestana. https://interestana.com/articles/lazarus-abuses-south-korean-security-software-to-deploy-malware-using-post-quantum-encryption-00jolqx1
MLA
“Lazarus Group Uses Post-Quantum Encryption in Cyber Espionage.” Interestana, 27 Oct. 2026, interestana.com/articles/lazarus-abuses-south-korean-security-software-to-deploy-malware-using-post-quantum-encryption-00jolqx1.
Chicago
Interestana AI Editorial. “Lazarus Group Uses Post-Quantum Encryption in Cyber Espionage.” Interestana, October 27, 2026. https://interestana.com/articles/lazarus-abuses-south-korean-security-software-to-deploy-malware-using-post-quantum-encryption-00jolqx1.
BibTeX
@misc{interestana_00jolqx1,
author = {{Interestana AI Editorial}},
title = {{Lazarus Group Uses Post-Quantum Encryption in Cyber Espionage}},
howpublished = {Interestana},
year = {2026},
month = oct,
url = {https://interestana.com/articles/lazarus-abuses-south-korean-security-software-to-deploy-malware-using-post-quantum-encryption-00jolqx1},
note = {Summary of reporting by The Hacker News, https://thehackernews.com/2026/10/lazarus-abuses-south-korean-security.html}
}Credit the source
Original reporting: The Hacker News, “Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption”, https://thehackernews.com/2026/10/lazarus-abuses-south-korean-security.html(opens in a new tab)
Follow this story
Get Cybersecurity in your inbox — new stories in 40 words or fewer, once a week.
Subscribe