Malware using ML-KEM: what the Lazarus FlashHole campaign means for SOC teams – Free Webinar
A free one-hour webinar from Quantum Academy and Applied Quantum on what post-quantum cryptography changes for security operations, starting with malware that already uses it.
Kaspersky reported in October that the Lazarus Group’s FlashHole campaign uses ML-KEM-1024 to protect the delivery of its final payload.
Browser makers and cloud providers have switched on hybrid key exchange by default, so your own traffic is changing too. We cover what changes for detection and response in both cases.
For SOC managers, detection engineers, threat hunters and incident responders.
What we cover
- What the FlashHole campaign shows about attackers’ use of ML-KEM
- What changes for network inspection when traffic uses hybrid key exchange
- How to adjust detection rules and decryption points
- What to agree with the architecture team before your organization turns hybrid key exchange on
The format
60 minutes, live online from 13:00 to 14:00 UTC: about 45 minutes of teaching, then 15 minutes for your questions. Registration is free, and everyone who registers receives the recording.
The full course is PQC for the SOC. Dates and booking are on the course page.
This webinar is educational and informational, and is not legal, compliance, or engineering advice.
