Kr: Investigation shows KT concealed malware infections, security failures leading to hacking breach

KT Corp., South Korea’s second-largest mobile carrier, was found to have concealed malware infections and failed to report the security breaches that led to a hacking and data theft incident, a government-led investigation revealed. The joint government-private investigation team said KT learned between March and July 2024 that 43 of its servers had been infected with so-called BPFDoor malware and other malicious code.

Despite detecting the infections, which exposed customer data, the company did not notify authorities and instead attempted to handle the issue internally. According to Yonhap News, the findings highlight security failures and concealment practices connected to the cyberattack linked to illegal micro base stations. The report underscores the ongoing scrutiny of KT’s handling of the incident as part of a broader review of cyber defences in the sector.