Tampered security programme at construction association spreads malware
On the website of a South Korean construction-related association, the installer for a security programme required to log in was tampered with, distributing an infostealer and a backdoor. More than 3,000 installations of the malicious installer were counted, and a valid certificate belonging to a South Korean defence contractor was stolen and misused. The date of the incident and the response have not been confirmed.
Key facts
- Affected organisation
- Being confirmed
- Incident type
- Malware
- Occurred / detected
- Not confirmed
- Scale of damage
- More than 3,000 installations of the malicious installer
- Cause / method
- Tampering of the login security programme installer and misuse of a stolen valid certificate from a South Korean defence contractor
- Location
- South Korea
Timeline
- It emerged that an infostealer and a backdoor had been spread through a tampered security programme on the website of a South Korean construction-related association, with more than 3,000 installations counted.
1 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.