#cryptography

Kaspersky: Lazarus malware in Operation FlashHole uses ML-KEM-1024 post-quantum encryption against South Korean firms

Kaspersky's 21 October 2026 report says a Lazarus campaign against South Korean software, construction and telecom-equipment firms uses NIST's ML-KEM-1024 to hide later malware payloads.