Xctdoor backdoor attacks target South Korean defence and manufacturing firms
Evidence emerged of attacks on South Korean defence and manufacturing companies in which malicious routines were inserted into an ERP update programme to install the Xctdoor backdoor. Cases of vulnerable web servers being taken over were also found. North Korea's Andariel was suspected to be behind the attacks.
Key facts
- Affected organisation
- Being confirmed
- Incident type
- Malware
- Occurred / detected
- Not confirmed
- Scale of damage
- Not confirmed
- Cause / method
- Insertion of malicious routines into an ERP update programme and takeover of vulnerable web servers
- Location
- South Korea
Timeline
- Evidence emerged of Xctdoor backdoor installations and vulnerable web server takeovers targeting South Korean defence and manufacturing companies.
1 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.