Lazarus Group Abuses South Korean Security Software to Deploy Malware

The North Korea-linked Lazarus Group is conducting a targeted cyber espionage campaign dubbed Operation FlashHole. The threat actors abuse legitimate South Korean security software to deploy malware protected by post-quantum encryption, primarily targeting organizations in the construction, software, and communication sectors.