Learn
active
Lazarus Operation FlashHole Uses Post-Quantum Encryption Against South Korean Targets
- Engineer — Learn: Post-quantum encryption in Lazarus C2 malware is a novel evasion technique worth tracking for future detection design, but no patch or config action is needed unless you run South Korean security software products in scope for this campaign.
- SOC/IR — Learn: Lazarus Group expanding its encryption tradecraft to post-quantum algorithms in malware signals a shift worth noting for nation-state detection coverage, but the summary provides no IOCs, Sigma rules, or ATT&CK mappings to act on today.
- Leader — Skip
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.