South Korea (target)

30 reports

South Korea China North Korea Global [+6] United States North Korea Cyber Espionage Social Media Monitoring Advanced Persistent Threat Operations Cryptocurrency Platform Targeting

East Asian State-Backed Cyber Groups Intensify Espionage and Ransomware Operations in 2025

North Korean Lazarus Group leads cryptocurrency targeting while Chinese threat actors deploy updated backdoors
South Korea North Korea North Korea Cyber Espionage [+3] Identity Spoofing GitHub Command Control Cloud Trust Abuse

North Korean Hackers Exploit GitHub Infrastructure in Diplomatic Espionage Campaign

Kimsuky group targeted South Korean diplomatic missions using cloud platforms for command and control operations
South Korea China Japan Taiwan [+5] China Cyber Espionage Coordinated Cyber Warfare Industrial Sabotage Advanced Persistent Threat Operations

Chinese State-Backed Groups Target East Asian Semiconductor Manufacturers in Coordinated Campaign

Cyber espionage operations focus on aerospace, defense, and critical technology sectors across the region
South Korea Unknown East Asian State Other Cyber Espionage [+1] Ransomware Campaigns

East Asian State-Backed Cyber Groups Intensify Espionage and Ransomware Operations in 2025

Notable incident disrupts South Korean ticketing giant Yes24 as regional threat actors demonstrate expanded capabilities
South Korea North Korea United States North Korea [+4] Cyber Espionage Identity Spoofing Advanced Persistent Threat Operations QR Code Phishing

North Korean Kimsuky Group Deploys QR Code Phishing Against Western Institutions

FBI warns of sophisticated credential theft campaign targeting think tanks and government entities
South Korea North Korea Global United States [+5] North Korea Government Infiltration Vulnerability Demonstration Advanced Persistent Threat Operations RDP Exploitation

North Korean Kimsuky Group Exploits Windows RDP Vulnerabilities in Think Tank Campaign

AhnLab identifies sophisticated attack chain targeting government organizations and research institutions
South Korea China Hong Kong India [+9] Indonesia Taiwan United States China Cyber Espionage Transnational Repression Government Infiltration Coordinated Cyber Warfare Persistent Network Infiltration

Justice Department Charges Chinese Ministry Officers in Global Hacking Campaign

Twelve defendants including MPS officials targeted dissidents and foreign governments through APT27 operations
South Korea North Korea North Korea Cyber Espionage [+2] Government Infiltration GitHub Command Control

North Korean Hackers Use GitHub as Command Center in Diplomatic Espionage Campaign

Operation targeted South Korean diplomatic missions with sophisticated spear-phishing techniques
South Korea North Korea North Korea Cyber Espionage [+1] Advanced Persistent Threat Operations

North Korean State Hackers Target South Korean Semiconductor Manufacturers in Coordinated Espionage Campaign

Advanced Persistent Threat Groups Compromise Two Major Chip Firms to Steal Critical Engineering Data
South Korea North Korea Global United States [+5] North Korea Cyber Espionage Cryptocurrency Theft AI Platform Breach AI-Enhanced Social Engineering

North Korean Hackers Deploy AI Tools for Enhanced Cryptocurrency Targeting

Microsoft reveals state-backed groups leveraged OpenAI models to automate phishing campaigns
South Korea North Korea United States North Korea [+2] Ransomware Campaigns Cryptocurrency Theft

North Korean Hackers Target Healthcare Systems with Cryptocurrency Ransomware Campaigns

Government agencies warn of escalating attacks against medical organizations amid broader cyber offensive
South Korea North Korea North Korea Cyber Espionage [+1] Coordinated Cyber Warfare

North Korean Cyberattacks on South Korea Surge 36% in 2023

Intelligence agencies report escalating digital warfare targeting public sector infrastructure
South Korea North Korea North Korea Cyber Espionage [+1] Communications Interception

North Korean Hackers Target South Korean Presidential Aide Before UK Visit

Breach demonstrates Pyongyang's sophisticated cyber capabilities against high-level officials
South Korea North Korea United States North Korea [+4] Military Espionage Nuclear Weaponization Ransomware Campaigns Healthcare Data Breach

North Korean Hackers Target Healthcare Systems to Fund Defense Cyber Operations

US-South Korea joint advisory reveals ransomware proceeds financing attacks on Pentagon networks
South Korea North Korea North Korea Cyber Espionage [+1] Ransomware Campaigns

North Korean Hackers Target Nearly 900 South Korean Foreign Policy Experts

Kimsuky group deployed spear-phishing campaigns while expanding into ransomware operations
South Korea North Korea United States Vietnam [+4] North Korea Social Media Hijacking Cryptocurrency Theft Blockchain Bridge Exploitation

North Korean State Hackers Execute $620 Million Cryptocurrency Heist Through Gaming Platform

Treasury sanctions Lazarus Group after FBI confirms largest crypto theft targeting Axie Infinity network
South Korea North Korea North Korea Cyber Espionage [+3] Malware Distribution Supply Chain Exploitation Watering Hole Attacks

North Korea's Lazarus Group Infiltrates South Korean Security Software Company

Hackers compromise Initech to identify vulnerabilities in software protecting over 10 million computers
South Korea North Korea Belgium United States [+4] North Korea Cyber Espionage Technology Transfer Pandemic Exploitation

North Korean Hackers Target COVID-19 Vaccine Research in Global Espionage Campaign

Kimsuky group conducted months-long spear-phishing operation against pharmaceutical companies developing pandemic countermeasures
South Korea China Australia Brazil [+10] Germany India Japan Sweden United States China Cyber Espionage Financial Cyber Theft Supply Chain Exploitation Ransomware Campaigns

Justice Department Charges Five Chinese Hackers for Global Corporate Espionage Campaign

APT41-linked operatives targeted over 100 companies in supply chain attacks and ransomware operations
South Korea Algeria China Iran [+6] European Union United States China Transnational Repression Diaspora Surveillance Cross-Border Intimidation

Transnational Repression Campaign Targets Dissidents Across Multiple Jurisdictions

Human Rights Organizations Document Global Crackdown on Political Opposition
South Korea North Korea North Korea Cyber Espionage [+4] Infrastructure Attacks Identity Spoofing Data Breach Publication Social Media Hijacking

North Korea's Kimsuky Group Breaches South Korean Nuclear Operator in Landmark Attack

2014 cyber operation against Korea Hydro and Nuclear Power marked first targeting of civilian nuclear infrastructure
South Korea North Korea North Korea Infrastructure Attacks [+3] Malware Distribution Coordinated Cyber Warfare Wiper Attacks

North Korean Lazarus Group Deploys Destructive DarkSeoul Wiper Against South Korean Infrastructure

March 2013 cyberattack marked evolution from DDoS operations to sophisticated malware targeting broadcast and financial sectors
South Korea North Korea Japan United States [+4] North Korea Cyber Capability Development Nuclear Defiance Nuclear Weaponization

North Korea Declares Cyberwarfare Capabilities 'All-Purpose Sword' Following Nuclear Test

Third underground nuclear test demonstrates miniaturization claims as Pyongyang elevates cyber operations to strategic priority
South Korea China Australia Germany [+7] Japan United States China Cyber Espionage Zero-Day Exploitation Watering Hole Attacks Advanced Persistent Threat Operations

Chinese Luckycat Hacker Group Conducts Multi-Region Cyber Espionage Campaign in 2011

Advanced Persistent Threat Operations Target Government and Private Sector Across Multiple Countries
South Korea China United States China [+2] Cyber Espionage Government Infiltration

Chinese Hackers Target Senior U.S. Officials Through Gmail Phishing Campaign

Jinan-based attackers compromised hundreds of accounts including Cabinet-level official
South Korea North Korea United States North Korea [+3] Infrastructure Attacks DDoS Attacks Coordinated Cyber Warfare

North Korean Lazarus Group Launches Ten Days of Rain Campaign Against South Korea

2011 cyber offensive targeted media, financial institutions and infrastructure using domestic proxy networks
South Korea North Korea North Korea Transnational Repression [+3] Identity Spoofing Assassination Attempt Deep Cover Operations

North Korean Agent Posed as Defector to Target Dissident Leader

Reconnaissance General Bureau operative infiltrated South Korea to assassinate prominent defector Hwang Jang-yop
South Korea China Australia Canada [+9] Japan United Kingdom United States China Cyber Espionage Infrastructure Attacks Communications Interception DNS Hijacking BGP Hijacking

China Telecom Hijacked Global Internet Traffic in Massive BGP Attack

Eighteen-minute incident redirected sensitive US government and military communications through Chinese servers
South Korea North Korea United States North Korea [+2] DDoS Attacks Coordinated Cyber Warfare

Coordinated Cyber Attacks Target South Korean and U.S. Government Infrastructure in July 2009

Distributed denial-of-service campaigns disrupt government websites across two allied nations
South Korea Unknown United States Other [+3] Infrastructure Attacks DDoS Attacks Coordinated Cyber Warfare

Coordinated Cyber Attacks Target South Korean and U.S. Government Infrastructure in July 2009

Multi-Wave DDoS Campaign Disrupts Government, Financial, and Media Systems
Select an article to read