Xctdoor backdoor attacks target South Korean defense and manufacturing firms
Evidence emerged of attacks on South Korean defense and manufacturing companies in which malicious routines were inserted into an ERP update program to install the Xctdoor backdoor. Cases of vulnerable web servers being taken over were also found. North Korea's Andariel was suspected to be behind the attacks.
Key facts
- Affected organization
- Being confirmed
- Incident type
- Malware
- Occurred / detected
- Not confirmed
- Scale of damage
- Not confirmed
- Cause / method
- Insertion of malicious routines into an ERP update program and takeover of vulnerable web servers
- Location
- South Korea
Timeline
- Evidence emerged of Xctdoor backdoor installations and vulnerable web server takeovers targeting South Korean defense and manufacturing companies.
1 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.