Chinese Hacker Suspect Arrested in South Korea Over Major Financial Cyberattack

South Korean authorities extradited a key suspect in a large-scale hacking operation, identified as Mr. G, a 34-year-old Chinese national, from Thailand to Incheon International Airport on 22 August 2025. The embezzlement linked to the case exceeded 38 billion won, with losses spread across traditional bank deposits and volatile virtual currencies.

The four-month pursuit culminated in an operation orchestrated through overseas offices, with victims described as high-profile and wealthy entrepreneurs and public figures. The group used a multi-faceted approach including phishing campaigns, credential stuffing, brute-force attacks, and exploitation of web application vulnerabilities, aided by IP obfuscation and encrypted communications, according to preliminary investigations by the Ministry of Justice’s International Criminal Division.

The case underscores transnational threats against financial systems and virtual asset platforms, with the extradition process involving close coordination among South Korean prosecutors, Thai law enforcement, and Interpol.