Security experts warn North Korean hackers aren't just using AI in their new campaigns, but also 'post-quantum' encryption

(Image credit: Pixabay)

Kaspersky says Lazarus's Operation FlashHole, active since at least July 2025, hit at least three South Korean software, construction, and telecom equipment firms

An updated LPEClient tool uses four ML-KEM-1024 key exchanges to protect payload delivery, a design Check Point also documented

The post-quantum layer guards traffic against future decryption, not endpoint detection, and the most likely way in for the hackers was still phishing

North Korea's most notorious hacking…