Lazarus Group's Operation FlashHole uses ML-KEM post-quantum key exchange in LPEClient against South Korean organizations
Lazarus Group, linked to North Korea, ran a cyberespionage campaign dubbed Operation FlashHole against South Korean organizations. The campaign combined spear-phishing, tailored websites, abuse of the financial security application INISAFE CrossWeb EX, and modular malware that ran largely in memory. It follows Operation SyncHole, which ab…