Lazarus hackers use post-quantum cryptography for malware delivery
Summary
North Korean hackers, identified as the Lazarus group, are employing post-quantum cryptography (PQC) to protect their malicious payload delivery methods. This advanced technique is being used in conjunction with both new and older malware strains.
IFF Assessment
FOE
The use of advanced cryptographic techniques by threat actors for malware delivery poses a significant challenge to defenders.
Defender Context
The adoption of post-quantum cryptography by sophisticated threat actors like Lazarus indicates an evolving threat landscape. Defenders should monitor for the emergence of PQC-based command-and-control infrastructure and payload encryption, as traditional decryption methods may become less effective.