Qilin Ransomware attacks South Korean MSP, 28 Financial Institutions affected, leaking 2TB of data.

2025-11-27 12:07:30

PANews, November 27 - According to The Hacker News, the Qilin ransomware group initiated the “Korean Leaks” supply chain attack by breaching GJTec, an IT service provider in South Korea, resulting in 28 financial companies being affected and over 1 million files totaling 2TB of data being stolen. Bitdefender's investigation found that this operation is related to the North Korean-backed APT “Moonstone Sleet” and is suspected to be in collaboration with the Russian-speaking Qilin group, aiming to exert pressure on the South Korean financial market.

View Original

This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.