Lazarus hackers use post-quantum cryptography for malware delivery
Kaspersky described the FlashHole campaign, in which the Lazarus Group uses the standardized ML-KEM post-quantum cryptographic mechanism to protect malware delivery against organizations in South Korea. The attacks began in July 2025 and involved phishing pages, specially crafted GitHub pages, and an in-memory execution chain.
CERT24