Tampered security program at construction association spreads malware
On the website of a South Korean construction-related association, the installer for a security program required to log in was tampered with, distributing an infostealer and a backdoor. More than 3,000 installations of the malicious installer were counted, and a valid certificate belonging to a South Korean defense contractor was stolen and misused. The date of the incident and the response have not been confirmed.
Key facts
- Affected organization
- Being confirmed
- Incident type
- Malware
- Occurred / detected
- Not confirmed
- Scale of damage
- More than 3,000 installations of the malicious installer
- Cause / method
- Tampering of the login security program installer and misuse of a stolen valid certificate from a South Korean defense contractor
- Location
- South Korea
Timeline
- It emerged that an infostealer and a backdoor had been spread through a tampered security program on the website of a South Korean construction-related association, with more than 3,000 installations counted.
1 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.