Supply chain attack on South Korean gaming industry plants malicious code in official security modules
In April-May 2024, a supply chain attack targeted South Korean game security vendors and game companies, inserting malicious routines into the security modules of officially distributed games. The attackers used stolen valid certificates to sign backdoors and hacking tools, and remote-control malware was distributed to systems where the modules were installed. The names of the affected companies, the extent of the damage and the response have not been confirmed.
Key facts
- Affected organisation
- Being confirmed
- Incident type
- Malware
- Occurred / detected
- Not confirmed
- Scale of damage
- Tampering with security modules of officially distributed games and distribution of remote-control malware to systems where they were installed
- Cause / method
- Supply chain attack that signed backdoors and hacking tools with stolen valid certificates and inserted malicious routines into game security modules
- Location
- South Korea
Timeline
- A supply chain attack targeting South Korean game security vendors and game companies in April-May 2024 and the distribution of remote-control malware were reported.
1 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.