Lazarus Group

Headlines · 1

1. Oct 30
   Lazarus Operation FlashHole combines AI phishing and post-quantum crypto

   Kaspersky reports that Lazarus Group’s Operation FlashHole, active since at least July 2025, targeted at least three South Korean organizations in software, construction, and wired communications equipment. The updated LPEClient payload tool uses four ML-KEM-1024 key exchanges to secure payload delivery, while phishing through GitHub Pages sites with likely AI-generated résumés was the probable initial-access route. Kaspersky’s attribution of the résumé and website to AI, and the exact infection trigger, remain uncertain.

   TechRadar · 🔥 0

Experience and discussion from the community

Share my Lazarus Group experienceAsk about Lazarus Group