Seoul accuses pro-Kremlin hackers of attacking websites over decision to monitor North Korean troops in Ukraine

Avatar

Pro-Russia hacker groups have ramped up attacks on South Korean organizations following Seoul’s decision to send observers to Ukraine after North Korean troops joined Russian forces on the frontlines.

According to a statement from the South Korean president’s office on Friday, the country’s cyber agencies have detected an increase in Russia-linked attacks, primarily targeting civilian and government websites.

“Access to some organizations’ websites has been temporarily delayed or disconnected, but aside from that, there has been no significant damage,” the statement said.

On Thursday, South Korea’s presidential office held an emergency meeting to discuss the government’s response to the recent and anticipated cyber threats from Russia.

Cyberattacks by pro-Russian hacktivist groups targeting South Korea have occurred sporadically in the past but have increased since North Korea sent troops to Russia to support its war in Ukraine, according to South Korean authorities.

“Since attacks are likely to continue in response to the situation in Ukraine, we’re planning to boost our cyber threat readiness by monitoring threats and maintaining close cooperation with relevant organizations,” the president’s office stated.

Among the pro-Russian hacktivist groups claiming responsibility for the attacks on South Korea are relatively unknown threat actors like Z Pentest and Alligator Black Hat, as well as NoName057(16), known for its distributed denial-of-service (DDoS) attacks on European targets.

The hackers claimed to have accessed equipment at a warehouse storing Ukrainian grain in a South Korean city, sharing a video purportedly showing them breaching the granary’s electronic controls for loading grain elevators. They also claimed to have hacked other critical South Korean industrial facilities, though none of these attacks have been confirmed by local authorities.

Earlier this week, South Korea reported that thousands of North Korean troops are now deployed on Russian soil to support its war on Ukraine. On Friday, Ukraine’s President Volodymyr Zelensky confirmed that North Korean troops are actively fighting Ukrainian forces in Russia’s Kursk region.

According to Zelensky, nearly 11,000 North Korean soldiers are currently stationed in Russia near the Ukrainian border. Ukraine’s allies, including South Korea, the U.S. and the  European Union, have condemned Moscow’s cooperation with Pyongyang on the frontlines.

CybercrimeGovernmentNewsNews Briefs
Get more insights with the

Recorded Future

Intelligence Cloud.

Learn more.

No previous article

No new articles

Daryna Antoniuk

is a reporter for Recorded Future News based in Ukraine. She writes about cybersecurity startups, cyberattacks in Eastern Europe and the state of the cyberwar between Ukraine and Russia. She previously was a tech reporter for Forbes Ukraine. Her work has also been published at Sifted, The Kyiv Independent and The Kyiv Post.

 

Total
0
Shares
Previous Post

CISA’s Jack Cable on secure-by-design pledge progress — and next steps

Next Post

Bitcoin Fog Founder Sentenced to 12 Years for Cryptocurrency Money Laundering

Related Posts

CISA Alerts to Active Exploitation of Critical Palo Alto Networks Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a now-patched critical security flaw impacting Palo Alto Networks Expedition to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2024-5910 (CVSS score: 9.3), concerns a case of missing authentication in the Expedition migration tool that
Avatar
Read More