New wave of cyberattacks hits South Korean financial firms Daishin Securities, Mirae Asset and Bithumb; 38,490 Daishin customers exposed
South Korean financial institutions suffered a fresh wave of cyberattacks, affecting brokerages Daishin Securities and Mirae Asset Global Investments and the crypto exchange Bithumb. Daishin confirmed that personal data of 38,490 customers was exposed, while Mirae and Bithumb reported separate incidents without confirming that customer data was taken. The activity comes about a month after a September wave that researchers linked to a suspected China-based hacker using an AI penetration testing tool called Artex. Officials are still investigating the root cause of the latest breaches, and no attribution has been made for them. The Financial Services Commission (FSC) has called for stronger cybersecurity measures and plans security checks on dozens of private-sector IT systems.
Detalhes técnicos
- Data exposed at Daishin Securities: names, email addresses and mobile phone numbers of 38,490 customers.
- The September wave was attributed by security researchers to a suspected China-based actor using the AI pentest tool Artex; the link to the current incidents is not established.
- Japan separately reported an incident involving GMO Internet after attacks on its financial institutions; investigators have not established a connection to the South Korean incidents.
- The initial access vector and root cause of the latest breaches have not been disclosed.
Remediação
- Daishin has notified affected customers, is cooperating with authorities and says it will compensate for losses as required by law.
- South Korean regulators are calling for stronger cybersecurity measures and will run security checks on dozens of private-sector IT systems.
- Customers of the affected firms should be alert to phishing and smishing that abuse the exposed contact details.
Linha do tempo
-
New wave of cyberattacks hits South Korean financial firms Daishin Securities, Mirae Asset and Bithumb; 38,490 Daishin customers exposed
ler a análise desta fonte ocultar
South Korean financial institutions suffered a fresh wave of cyberattacks, affecting brokerages Daishin Securities and Mirae Asset Global Investments and the crypto exchange Bithumb. Daishin confirmed that personal data of 38,490 customers was exposed, while Mirae and Bithumb reported separate incidents without confirming that customer data was taken. The activity comes about a month after a September wave that researchers linked to a suspected China-based hacker using an AI penetration testing tool called Artex. Officials are still investigating the root cause of the latest breaches, and no attribution has been made for them. The Financial Services Commission (FSC) has called for stronger cybersecurity measures and plans security checks on dozens of private-sector IT systems.
Technical Details
- Data exposed at Daishin Securities: names, email addresses and mobile phone numbers of 38,490 customers.
- The September wave was attributed by security researchers to a suspected China-based actor using the AI pentest tool Artex; the link to the current incidents is not established.
- Japan separately reported an incident involving GMO Internet after attacks on its financial institutions; investigators have not established a connection to the South Korean incidents.
- The initial access vector and root cause of the latest breaches have not been disclosed.
Remediation
- Daishin has notified affected customers, is cooperating with authorities and says it will compensate for losses as required by law.
- South Korean regulators are calling for stronger cybersecurity measures and will run security checks on dozens of private-sector IT systems.
- Customers of the affected firms should be alert to phishing and smishing that abuse the exposed contact details.