Security experts warn North Korean hackers aren't just using AI in their new campaigns, but also 'post-quantum' encryption (www.techradar.com)

Kaspersky's analysis reveals that North Korea's Lazarus Group has adopted advanced techniques in its ongoing cyber campaign, dubbed Operation FlashHole, targeting South Korean firms in software, construction, and telecom sectors since July 2025. Notably, the updated malware tool LPEClient now employs ML-KEM-1024 post-quantum encryption for secure payload delivery, a technology typically reserved for government and private sector cybersecurity. The group delivers its malware via spear-phishing tactics, utilizing AI-generated content to enhance the authenticity of its attacks. This development is significant as it showcases a state-sponsored hacking group leveraging cutting-edge cryptographic methods that are still in early adoption phases by legitimate enterprises. Kaspersky highlights that Lazarus's rapid adoption of post-quantum cryptography could reflect a strategic move to protect malicious communications against future quantum computing threats, even before these threats fully materialize. While this encryption shields data in transit, it doesn’t obfuscate malware activity on infected machines, emphasizing the need for robust endpoint protection. The combination of AI and emerging cryptographic techniques indicates an evolving landscape in cyber espionage tactics, raising alarms for cybersecurity professionals.