Lazarus hackers use post-quantum cryptography for malware delivery

BleepingComputer reported that Lazarus hackers are using post-quantum cryptography in malware delivery. The report points to an apparent adoption of cryptographic techniques designed to remain secure against future quantum-computing capabilities, bringing a technology usually discussed in defensive security planning into an offensive malware context.

Lazarus is the name commonly used by cybersecurity researchers for a hacking group that has been widely linked to North Korea. The group has been associated with cyberespionage and financially motivated operations, including activity affecting cryptocurrency and Web3 organizations. The reported use of post-quantum cryptography could add another layer of complexity for analysts attempting to inspect or disrupt malicious infrastructure.

Post-quantum cryptography refers to algorithms intended to resist attacks from sufficiently capable quantum computers, which could threaten some widely used forms of encryption. Its appearance in malware delivery underscores that emerging security technologies can be adopted by both defenders and attackers. Organizations that handle digital assets, sensitive data, or software supply chains continue to face risks from evolving malware techniques and should monitor trusted security advisories and maintain established security controls.