Lazarus wraps malware delivery in post-quantum crypto (FlashHole)
Kaspersky says Lazarus's Operation FlashHole uses ML-KEM-1024 in its LPEClient loader to encrypt C2 and hide payloads. At least three South Korean firms were hit.
Kaspersky says Lazarus's Operation FlashHole uses ML-KEM-1024 in its LPEClient loader to encrypt C2 and hide payloads. At least three South Korean firms were hit.