The North Korea-linked Lazarus Group has been attributed to a cyber espionage campaign dubbed Operation FlashHole targeting at least three organizations in South Korea spanning the construction, software, and wire-communication equipment manufacturing sectors.

According to Russian cybersecurity company Kaspersky, the campaign has been active since at least July 2025. It’s assessed to pick up