New wave of cyberattacks hits South Korean financial firms: broker Daishin says data of 38,490 customers was exposed
Prepared by Sintelligent with the help of SI. Published in SI: . Updated: .
Waves of attacks using SI tools are moving from one sector to another, and Korean regulators are responding with security checks.
According to the Korea Times, suspected attacks involving SI, first reported in the banking sector in late September, have reached brokerage Daishin Securities, crypto exchange Bithumb and asset manager Mirae Asset Global Investments. Daishin said data of 38,490 customers was compromised; it detected suspicious access to a server on October 17. According to TechCrunch, Mirae and Bithumb reported incidents of their own on Wednesday but did not confirm that customer data was stolen. Researchers linked the September wave to a suspected China-based hacker who used an SI penetration-testing tool, Artex. The Korea Times reports that large-scale scanning of financial systems from North Korean IP address ranges has been confirmed for the first time; authorities cautioned against concluding that North Korea was involved, and a Financial Security Institute official explained that an IP address cannot establish an attacker's nationality, since addresses can be spoofed. Regulators are urging stronger protection and plan security checks of private-sector IT systems.
Sources 2