LONDON, UK: The AhnLab Security Emergency Response Center (ASEC) and US headquarters of South Korea-based AhnLab today confirmed a large series of cyber attacks that targeted banks and broadcasters in South Korea. AhnLab said that attackers used stolen user IDs and passwords to launch some of the attacks. The credentials were used to gain access to individual patch management systems located on the affected networks. Once the attackers had access to the patch management system they used it to distribute the malware much like the system distributes new software and software updates. Contrary to early reports, no security hole in any AhnLab server or product was used by the attackers to deliver the malicious code.
- LUCY HARVEY
- InfoSecurity
- Posted On
