Coverage tagged "South Korea".
The North Korea-linked Lazarus Group has been attributed to a cyber espionage campaign dubbed Operation FlashHole targeting at least three organizations in South Korea spanning the construction…
South Korean police identified seven suspects linked to a cybercrime operation that breached more than 90 organizations in the country, with ARTEX AI pentesting framework used in most of the attacks.
CrowdStrike Intelligence identified infrastructure associated with a targeted campaign against South Korean financial organizations that resulted in exfiltrated data. The campaign was active from…
For ten days, auditors appointed by the Korea Internet & Security Agency (KISA) sat together with us and worked through 80 controls. That is what it took for a company headquartered in the United…
Microsoft on Wednesday disclosed that a China state-aligned actor dubbed Storm-0940 was behind the recent supply chain compromise of the ConnectWise Cloud Backup application. During the incident…
IntroductionIn October 2026, Zscaler ThreatLabz investigated AI-assisted cyberattacks that combined the ARTEX penetration testing framework with AI coding assistants and custom automation scripts…
IT services · South Korea | A complete corporate identity directory of an IT services company, 999 personnel accounts with names and corporate email addresses; The client staffing structure showing…
In January, we responded to the Lazarus Group’s novel attack campaign against South Korea, which followed last year’s Operation SyncHole. In this new operation, the group employed an updated malware…
A 45-year-old U.S. citizen pleaded guilty to running a widespread identity theft and fraud scheme that defrauded thousands of U.S. servicemembers and veterans while living in the Philippines, the…
IT services · South Korea | [PENDING EXPOSURE]
songwooi.co.kr SONGWOOI (Song Woo Industrial Co., Ltd.,) South Korean manufacturer of automotive and industrial rubber hoses — intercooler/TCI, heater, fuel, CPF/DPF, and power steering lines —…
The threat actor linked to recent AI-assisted attacks on South Korean financial institutions was testing infrastructure and assembling attack tools as early as August 2026, weeks before the banking…
IntroductionZscaler ThreatLabz analyzed a recently active exploitation campaign in which a threat actor abused ARTEX to target South Korean financial institutions. ARTEX is an open source agentic…
Port terminal operations · South Korea | Commercial invoice records and billing system material | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC]
Dry bulk shipping · South Korea | Internal financial records (sales vouchers) and vessel operational reports | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC]
Port terminal operations · South Korea | Operational EDI archives and internal database scripts | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC]
Port IT services · South Korea | Billing service records and operational EDI sample material | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC]
Inland container depot · South Korea | Commercial invoice records and systems release documentation | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC]
Ferry / RoRo shipping · South Korea | Internal staff account records with plaintext credentials and financial receipt records | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC]
Ship management · South Korea | Internal financial records (expense applications and bunker cost calculations) | [NOT PAID — EXPOSED: files publish 2026-10-19 13:27 UTC]
