Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum Encryption

The North Korea-linked Lazarus Group has launched Operation FlashHole, a cyber espionage campaign targeting South Korean organizations in construction, software, and wire-communication sectors since July 2025. The group exploits mandatory financial security software, INISAFE CrossWeb EX, to deploy malware using post-quantum encryption techniques, continuing tactics from the earlier Operation SyncHole.