> TritonInfoSec News
Home / Oct 28, 2026 / Story
0
#3 The Hacker News general October 27, 2026 at 11:32 UTC

Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption

By [email protected] (The Hacker News)

AI Summary

Kaspersky researchers linked North Korea's Lazarus Group to 'Operation FlashHole,' an espionage campaign active since at least July 2025 targeting South Korean organizations in construction, software, and wire-communication manufacturing. The group abused legitimate South Korean security software as an attack vector and deployed malware using post-quantum encryption, signaling an evolution in their operational tradecraft to defeat future decryption efforts. At least three organizations have been confirmed compromised.

Read full article → https://thehackernews.com/2026/10/lazarus-abuses-s…

Relevance score: 86.0/100

# More from October 28

  1. 1
    Code-execution flaw in UEFI firmware threatens most servers on planet Earth Ars Technica Security
  2. 2
    CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution The Hacker News
  3. 4
    Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads The Hacker News
  4. 5
    Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens The Hacker News
  5. 6
    Australia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected Computers The Hacker News
  6. 7
    Keystone to Destroy 18,835 Hardware Wallets After Hackers Steal Device Verification Key The Hacker News
  7. 8
    Tailscale warns of SSH flaws allowing root privilege escalation BleepingComputer
  8. 9
    UNM Health ransomware attack disrupts patient care, surgeries BleepingComputer
  9. 10
    HPE Patches Dozens of Critical Flaws in Networking Products SecurityWeek