Hybrid Cyberattack Targets South Korean Financial Sector

Hybrid Cyberattack Targets South Korean Financial Sector

First seen 24 Nov 2025, 18:27 UTC •Bitdefender •30.2

Article Content

Browse articles
ThreatCluster

The 'Korean Leaks' campaign is a complex supply chain attack aimed at South Korea's financial services, involving the Ransomware-as-a-Service group Qilin and North Korean state-affiliated actors known as Moonstone Sleet. The attack utilized a compromise of Managed Service Providers (MSPs) to gain initial access to the targeted systems.

How this analysis works

Extracted Entities

1 / 2