Lazarus uses post-quantum ML-KEM encryption to hide malware in South Korean attacks
Kaspersky says North Korea's Lazarus Group runs a campaign dubbed FlashHole that uses ML-KEM-1024 key exchange to deliver its Cubridge backdoor to South Korean organizations.