The key facts

  • Hackers have begun using post-quantum encryption algorithms in malware
  • According to a Kaspersky GReAT expert, this gives attackers no practical advantages yet
  • Interest in post-quantum cryptography is linked to changes in forecasts for the emergence of quantum computers capable of breaking modern cryptography

Post-quantum algorithms have appeared in malware

Hackers have begun embedding encryption algorithms resistant to attacks using quantum computers into malicious programs. This was reported by Sergey Lozhkin, who told Gazeta.Ru, head of the Global Research and Analysis Team at Kaspersky (Kaspersky GReAT) for the META and APAC regions. According to him, this gives attackers no practical advantage yet: such algorithms may be added 'for fun' or to show off technical capabilities.

What these algorithms are and why they have appeared in malware

We are talking about post-quantum algorithms — encryption methods designed to counter attacks using quantum computers. As Lozhkin explained, these algorithms were developed many years ago and are already used in many fields, including malware — this is not a new phenomenon. Interest in them is also linked to changes in forecasts regarding the timeline for the emergence of quantum computers capable of breaking modern cryptographic algorithms. The expert noted that a breakthrough in quantum technologies could happen at any moment, which is why some organizations are already switching to post-quantum algorithms, and in certain countries their use has become a mandatory requirement for government agencies and large companies.

Why attackers need this

According to Lozhkin, malware developers use post-quantum algorithms not so much to genuinely protect their programs from future decryption as for reasons of prestige — 'just in case' and to 'not be like everyone else.' The attackers currently have no specific goal of protecting ransomware from future decryption, the expert emphasized: 'There is no benefit from this yet.' Thus, for data protection, post-quantum cryptography is already becoming a practical requirement in the legitimate sector, whereas in the criminal world it remains, for now, more of an element of self-presentation. Earlier, Kaspersky stated that hackers around the world are 'getting younger'.