The “Korean Leaks” Siege: Qilin & North Korea Cripple Financial Sector via MSP Hack

A sophisticated cyber campaign named "Korean Leaks" has targeted South Korea's financial sector, executed by the Qilin ransomware group, potentially with North Korean state support. This unprecedented attack involved a supply chain breach affecting multiple financial firms in a single month, marking South Korea as the second most-targeted country for ransomware.

The attackers utilized a Managed Service Provider (MSP) to gain access to numerous victims simultaneously, showcasing a dangerous collaboration between profit-driven cybercrime and state-sponsored espionage. Unlike typical ransomware operations, this campaign was politically charged, threatening national stability and the stock market, and was characterized by aggressive propaganda.