{
  "id": 17165991,
  "title": "Security experts warn North Korean hackers aren't just using AI in their new campaigns, but also 'post-quantum' encryption",
  "url": "https://urgent.news/2026/10/30/security-experts-warn-north-korean-hackers-arent-just-using-ai-in",
  "topic": "ai",
  "section": "AI",
  "published": "2026-10-30T03:05:00.000Z",
  "source": {
    "name": "TechRadar",
    "slug": "techradar",
    "url": "https://www.techradar.com/pro/security/security-experts-warn-north-korean-hackers-arent-just-using-ai-in-their-new-campaigns-but-also-post-quantum-encryption"
  },
  "original_language": "en",
  "account": "Kaspersky reports that North Korean hacking group Lazarus has incorporated post-quantum encryption into its latest cyber campaign, dubbed Operation FlashHole, which has targeted South Korean software, construction, and telecommunications firms since at least July 2025. The attackers use an updated LPEClient tool that employs ML-KEM-1024, a key exchange mechanism designed to withstand future quantum computer attacks, to secure the channel for downloading additional malware. The group's decision to incorporate post-quantum cryptography appears to be a forward-looking strategy, as no quantum computer currently exists that can break classical key exchanges used for internet traffic. This move allows Lazarus to keep its tooling secure against potential future decryption attempts from more powerful adversaries.",
  "summary": "North Korea's Lazarus is wrapping malware delivery in ML-KEM-1024, the NSA's pick for national security systems, but it won't hide the malware itself.",
  "key_points": [
    "North Korean hacking group Lazarus targets South Korean firms since July 2025",
    "Operation FlashHole incorporates post-quantum encryption ML-KEM-1024",
    "Lazarus aims to secure tooling against future quantum decryption attempts"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}