South Korean construction trade organization · 05/08/2024
The South Korea's National Cyber Security Center (NCSC) warns that state-backed threat actors DPRK hijacked flaws in a VPN's software update to deploy malware and breach networks. In the first case they compromised the website of a South Korean construction trade organization to disseminate malware to visitors. [Date Occurred: During January 2024; Date Discovered: During January 2024]
Construction and machinery companies in South Korea · 05/08/2024
The South Korea's National Cyber Security Center (NCSC) warns that state-backed threat actors DPRK hijacked flaws in a VPN's software update to deploy malware and breach networks. In the second case they exploited vulnerabilities in domestic security software (VPN and server security) to replace update files with malware, distributing remote control malware named "DoraRAT" to construction and machinery companies. [Date Occurred: During January 2024; Date Discovered: During January 2024]