Korea's Financial Security Institute reports leak after hacking
Officials say a security-assessment website was hit and some firms' security-status submissions may have been exposed.
Stories per day · 30 days
6 RSS
Relatedartex7lazarus5data-breach4financial-sector4crossweb-ex3data-theft3extortion3spearphishing3agentic-ai2ai-tools2claude-code2cryptocurrency2data-leak2financial-services2ml-kem2north-korea2post-quantum2privacy2
49 stories, newest first · one card per story
Stories tagged #south-korea
ARTEX Hackers Expose Servers Revealing AI Tools in South Korean Bank Breaches
Hackers left servers open exposing ARTEX framework with Claude Code DeepSeek GLM and Grok models used in breaches affecting 66,000 to 67,000 people and 2,200 companies across seven South Korean banks.
South Korean presidential office holds emergency meeting over personal data leak
A computer file containing personal data of President Lee Jae Myung and his entourage was uploaded to a public website in June.
HYBE discloses employee data breach
Unauthorized access via vendor document software exposed medical records and financial details of current and former employees and partners.
South Korean financial firms hit by another wave of cyberattacks
Daishin says names, emails, and phone numbers of 38,490 customers were exposed; Mirae and Bithumb have not confirmed theft.
1
Bithumb discloses employee-system breach amid other Korean finance hacks
The exchange is still checking whether member data leaked; Daishin reported about 38,490 affected customers.
1
Lazarus abuses INISAFE CrossWeb EX in Operation FlashHole
Kaspersky says at least three South Korean firms were targeted since July 2025 via spear-phishing and in-memory loaders.
1
Police arrest man accused of stealing 8.2 million Korean records
About 90 organizations were hit from September 2025; extortion demands totaled 360 million won, not confirmed payments.
1
South Korean police arrest suspect in theft of 8.2 million records
Investigators link AI-assisted intrusions at 60 victims and extortion demands totaling 360 million won.
1
South Korea arrests gang that used ARTEX AI to steal 8.2 million records
Police say seven suspects hit more than 90 organizations; ransom was demanded in 38 cases, and only the leader remains detained.
Akamai post says ARTEX shows overlooked attack surfaces
Visible headings cite South Korean regulators, financial services, and AI speeding attacks rather than changing fundamentals.
2
Cloudflare obtains South Korea ISMS certification under ISMS-P
Korean sign-ups require three separate consents, and social login is not offered in South Korea.
1
Lazarus uses ML-KEM-1024 to hide payloads in Operation FlashHole
Securelist says at least three South Korean organizations were hit, with the earliest evidence in July 2025.
4
Lazarus hid FlashHole malware traffic with post-quantum keys
Kaspersky ties July 2025 activity to at least three South Korean organizations and an LPEClient build using ML-KEM-1024.
2
Storm-0940 used ARTEX and AI coding agents against many targets
Microsoft says the group tried more than 2,250 tenants at about 2,900 sign-ins a minute.
6
Lazarus uses ML-KEM to deliver malware in FlashHole attacks
Kaspersky says phishing led to in-memory loaders and the Cubridge backdoor at South Korean firms, starting in July 2025.
Lazarus Operation FlashHole targets South Korean organizations
Kaspersky links at least three firms in three sectors, with earliest evidence in July 2025.
6
TAG-217’s South Korea bank operation exposed its own tools
Open directories showed crypto, Linux and mobile tooling; cited breaches cover at least 68,000 people.
2
KR: NHIS Employee Sold Data, Victims Uninformed for Three Months
A South Korean NHIS employee sold health-insurance subscriber data for years; victims remain unnotified.
2
TAG-217 Targets South Korean Financial Services with ARTEX
TAG-217 used the ARTEX AI framework in attacks that exposed data on 68,000 people at South Korean banks.
Threat Actor Abuses Agentic AI Pentesting Framework to Target South Korean Financial Institutions
A threat actor used the ARTEX agentic pentest framework to steal financial PII from South Korean institutions.
5
SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 3
Security Affairs’ third newsletter rounds up recent AI and cybersecurity headlines.
ARTEX AI, Claude agents used in cyberattacks on South Korean banks
A Chinese-speaking attacker used ARTEX AI and Claude agents against South Korean banks, exposing customer data.
AI-Driven tool ARTEX used in attacks against South Korean Banks
CrowdStrike says a Chinese-speaking actor used ARTEX and LLMs to breach South Korean banks and steal data for sale.
11