South Korea

30 reports

South Korea China North Korea Russia [+12] Allied Nations Global United States China Cyber Espionage Defense Procurement Fraud Social Media Monitoring Ransomware Campaigns Advanced Persistent Threat Operations Critical Infrastructure Mapping APT Collaboration Model Cryptocurrency Platform Targeting

East Asian State-Backed Cyber Groups Intensify Espionage and Ransomware Operations in 2025

Chinese state-sponsored actors lead unprecedented surge in global network infiltration and data theft campaigns
South Korea North Korea North Korea Cyber Espionage [+3] Identity Spoofing GitHub Command Control Cloud Trust Abuse

North Korean Hackers Exploit GitHub Infrastructure in Diplomatic Espionage Campaign

Kimsuky group targeted South Korean diplomatic missions using cloud platforms for command and control operations
South Korea China China Academic Platform Hijacking [+1] Drone Surveillance

Chinese State Intelligence Services Deploy Advanced Surveillance Operations Against Busan Infrastructure During July 2025

South Korean authorities arrest two graduate students conducting unauthorized drone surveillance and electronic reconnaissance
South Korea China Japan Taiwan [+5] China Cyber Espionage Coordinated Cyber Warfare Industrial Sabotage Advanced Persistent Threat Operations

Chinese State-Backed Groups Target East Asian Semiconductor Manufacturers in Coordinated Campaign

Cyber espionage operations focus on aerospace, defense, and critical technology sectors across the region
South Korea Unknown East Asian State Other Cyber Espionage [+1] Ransomware Campaigns

East Asian State-Backed Cyber Groups Intensify Espionage and Ransomware Operations in 2025

Notable incident disrupts South Korean ticketing giant Yes24 as regional threat actors demonstrate expanded capabilities
South Korea North Korea United States North Korea [+4] Cyber Espionage Identity Spoofing Advanced Persistent Threat Operations QR Code Phishing

North Korean Kimsuky Group Deploys QR Code Phishing Against Western Institutions

FBI warns of sophisticated credential theft campaign targeting think tanks and government entities
South Korea North Korea Global United States [+5] North Korea Government Infiltration Vulnerability Demonstration Advanced Persistent Threat Operations RDP Exploitation

North Korean Kimsuky Group Exploits Windows RDP Vulnerabilities in Think Tank Campaign

AhnLab identifies sophisticated attack chain targeting government organizations and research institutions
South Korea China Hong Kong India [+9] Indonesia Taiwan United States China Cyber Espionage Transnational Repression Government Infiltration Coordinated Cyber Warfare Persistent Network Infiltration

Justice Department Charges Chinese Ministry Officers in Global Hacking Campaign

Twelve defendants including MPS officials targeted dissidents and foreign governments through APT27 operations
South Korea North Korea North Korea Cyber Espionage [+2] Government Infiltration GitHub Command Control

North Korean Hackers Use GitHub as Command Center in Diplomatic Espionage Campaign

Operation targeted South Korean diplomatic missions with sophisticated spear-phishing techniques
South Korea North Korea Europe Japan [+8] Multiple Western Nations United States Western Nations North Korea Cyber Espionage Academic Espionage Advanced Persistent Threat Operations Regional Intelligence Gathering

North Korean Kimsuky Group Maintains Global Reconnaissance Operations Against Western Institutions

DPRK-linked APT conducts systematic espionage campaign targeting government, academic, and research organizations across Asia-Pacific region
South Korea North Korea Asia-Pacific Region Japan [+9] United States North Korea Cyber Espionage Academic Espionage Social Media Monitoring Professional Network Recruitment Close Access Operations Intelligence Assessment Disclosure Advanced Persistent Threat Operations

North Korean Kimsuky Group Maintains Global Reconnaissance Operations Against Western Institutions

AIDE Network Analysis Reveals Distributed Infrastructure Supporting Sustained Espionage Campaign
South Korea North Korea North Korea Cyber Espionage [+1] Advanced Persistent Threat Operations

North Korean State Hackers Target South Korean Semiconductor Manufacturers in Coordinated Espionage Campaign

Advanced Persistent Threat Groups Compromise Two Major Chip Firms to Steal Critical Engineering Data
South Korea North Korea Global United States [+5] North Korea Cyber Espionage Cryptocurrency Theft AI Platform Breach AI-Enhanced Social Engineering

North Korean Hackers Deploy AI Tools for Enhanced Cryptocurrency Targeting

Microsoft reveals state-backed groups leveraged OpenAI models to automate phishing campaigns
South Korea North Korea United States North Korea [+2] Ransomware Campaigns Cryptocurrency Theft

North Korean Hackers Target Healthcare Systems with Cryptocurrency Ransomware Campaigns

Government agencies warn of escalating attacks against medical organizations amid broader cyber offensive
South Korea North Korea North Korea Cyber Espionage [+1] Coordinated Cyber Warfare

North Korean Cyberattacks on South Korea Surge 36% in 2023

Intelligence agencies report escalating digital warfare targeting public sector infrastructure
South Korea North Korea North Korea Cyber Espionage [+1] Communications Interception

North Korean Hackers Target South Korean Presidential Aide Before UK Visit

Breach demonstrates Pyongyang's sophisticated cyber capabilities against high-level officials
South Korea North Korea United States North Korea [+4] Military Espionage Nuclear Weaponization Ransomware Campaigns Healthcare Data Breach

North Korean Hackers Target Healthcare Systems to Fund Defense Cyber Operations

US-South Korea joint advisory reveals ransomware proceeds financing attacks on Pentagon networks
South Korea North Korea North Korea Cyber Espionage [+1] Ransomware Campaigns

North Korean Hackers Target Nearly 900 South Korean Foreign Policy Experts

Kimsuky group deployed spear-phishing campaigns while expanding into ransomware operations
South Korea North Korea North Korea Cyber Espionage [+3] Malware Distribution Supply Chain Exploitation Watering Hole Attacks

North Korea's Lazarus Group Infiltrates South Korean Security Software Company

Hackers compromise Initech to identify vulnerabilities in software protecting over 10 million computers
South Korea North Korea Belgium United States [+4] North Korea Cyber Espionage Technology Transfer Pandemic Exploitation

North Korean Hackers Target COVID-19 Vaccine Research in Global Espionage Campaign

Kimsuky group conducted months-long spear-phishing operation against pharmaceutical companies developing pandemic countermeasures
South Korea China Australia Brazil [+10] Germany India Japan Sweden United States China Cyber Espionage Financial Cyber Theft Supply Chain Exploitation Ransomware Campaigns

Justice Department Charges Five Chinese Hackers for Global Corporate Espionage Campaign

APT41-linked operatives targeted over 100 companies in supply chain attacks and ransomware operations
South Korea Algeria China Iran [+6] European Union United States China Transnational Repression Diaspora Surveillance Cross-Border Intimidation

Transnational Repression Campaign Targets Dissidents Across Multiple Jurisdictions

Human Rights Organizations Document Global Crackdown on Political Opposition
South Korea North Korea Russia Ukraine [+10] Russia Election Interference Cyber Espionage Infrastructure Attacks Identity Spoofing Malware Distribution Government Infiltration Data Breach Publication Social Media Hijacking Persistent Network Infiltration

Russian Hackers Nearly Manipulated Ukraine Presidential Election Results in Real-Time Cyberattack

CyberBerkut infiltrators deleted key election files and fabricated results showing far-right victory before being detected
South Korea North Korea North Korea Infrastructure Attacks [+3] Malware Distribution Coordinated Cyber Warfare Wiper Attacks

North Korean Lazarus Group Deploys Destructive DarkSeoul Wiper Against South Korean Infrastructure

March 2013 cyberattack marked evolution from DDoS operations to sophisticated malware targeting broadcast and financial sectors
South Korea North Korea Japan United States [+4] North Korea Cyber Capability Development Nuclear Defiance Nuclear Weaponization

North Korea Declares Cyberwarfare Capabilities 'All-Purpose Sword' Following Nuclear Test

Third underground nuclear test demonstrates miniaturization claims as Pyongyang elevates cyber operations to strategic priority
South Korea China Asia-Pacific Region Australia [+16] Germany India Japan Multiple Multiple Asia-Pacific Tibet United States China Cyber Espionage Government Infiltration Military Espionage Zero-Day Exploitation Persistent Network Infiltration Watering Hole Attacks Advanced Persistent Threat Operations Diaspora Surveillance

Chinese Luckycat Hacker Group Conducts Multi-Region Cyber Espionage Campaign in 2011

State-Sponsored APT Operation Targets Government and Military Networks Across Asia-Pacific
South Korea China United States China [+2] Cyber Espionage Government Infiltration

Chinese Hackers Target Senior U.S. Officials Through Gmail Phishing Campaign

Jinan-based attackers compromised hundreds of accounts including Cabinet-level official
South Korea North Korea United States North Korea [+3] Infrastructure Attacks DDoS Attacks Coordinated Cyber Warfare

North Korean Lazarus Group Launches Ten Days of Rain Campaign Against South Korea

2011 cyber offensive targeted media, financial institutions and infrastructure using domestic proxy networks
South Korea North Korea North Korea Transnational Repression [+3] Identity Spoofing Assassination Attempt Deep Cover Operations

North Korean Agent Posed as Defector to Target Dissident Leader

Reconnaissance General Bureau operative infiltrated South Korea to assassinate prominent defector Hwang Jang-yop
South Korea China Australia Canada [+9] Japan United Kingdom United States China Cyber Espionage Infrastructure Attacks Communications Interception DNS Hijacking BGP Hijacking

China Telecom Hijacked Global Internet Traffic in Massive BGP Attack

Eighteen-minute incident redirected sensitive US government and military communications through Chinese servers
Select an article to read