CrossWeb EX

Search everything

Mentions · 7d2
Mentions · 30d2
All mentions2
First seenOct 21, 2026
Last mentioned3d ago

Timeline

2 articles · newest first

Lazarus uses ML-KEM-1024 to hide payloads in Operation FlashHole

Securelist says at least three South Korean organizations were hit, with the earliest evidence in July 2025.

Cyber Security NewsOct 22, 12:38 UTC · 3d agoThreat actor 4 sources2 · 1 read

Lazarus Operation FlashHole targets South Korean organizations

Kaspersky links at least three firms in three sectors, with earliest evidence in July 2025.

Kaspersky Securelistupdated Oct 22, 12:38 UTC · 3d agofirst Oct 21, 02:07 UTC · 4d agoThreat actor 4 sources5 · 4 reads

Appears with

Kasperskyorganization · 2
TouchHubmalware · 1
Lazarus Groupthreat actor · 1
INISAFE CrossWeb EXproduct · 1
ClientHubmalware · 1
TouchShiftmalware · 1
Lazarusthreat actor · 1
Cubridgemalware · 1
LPEClientmalware · 1
TechHubmalware · 1

Entities are extracted by the model from each article. First seen Oct 21, 2026, last mentioned 3d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.