KakaoBank and K Bank Servers Also Targeted... 28 Attacker IPs Identified

[Anchor]

It has been confirmed that some of the internet addresses, or IPs, used in the widespread financial sector hacking incident also attempted to access the servers of KakaoBank and K Bank. Financial authorities have identified 28 IPs used in the attacks.

This is reported by Lee Tae-gwon.

[Reporter]

Some of the internet addresses and IPs used in the attacks against seven financial institutions, including Shinhan Bank where personal information leaks occurred, were found to have also attempted access to all three domestic internet-only banks.

Following confirmed access attempts on Toss Bank since last January, IPs from the United States and South Korea were found to have accessed K Bank's servers a total of four times from last July to last month.

For KakaoBank, IPs from China, the United States, and Malaysia accessed the servers six times between January and March, and it was confirmed that there was actually one attack attempt on September 29 aimed at identifying server vulnerabilities.

However, these access attempts were blocked by security systems and did not lead to personal information leaks or other damages.

The Financial Supervisory Service has identified 28 attacker IPs and distributed them to the financial sector along with information on the countries of origin.

[Kwon Huhn-young, Professor, Korea University Graduate School of Information Security: Since there may be attacks in a bypassed form, additional analysis will likely be needed to determine the actual original source of the attack. Additional checks are also necessary to see if the risk is spreading to other areas...]

Banks and card companies conducted emergency inspections of their security systems by today (October 6) at the request of financial authorities.

BNK Busan Bank, where the personal information of 11 outsourced workers was exposed on October 1, reportedly reported a "deficient" rating in one out of 12 checklist items, specifically regarding the omission of external system authorization verification functions.

This means that although it was not the main system, there was an external page that could be accessed without a separate login.

Stating that secondary damage could occur, financial authorities issued a consumer advisory caution alert, designated the one month starting today as a special response period, and instructed financial institutions to operate dedicated customer service desks for affected clients and to strengthen the detection of anomalous transactions.

(Video by Park Ji-in | VJ: Lee Ji-hwan | Design: Park Cheon-woong)
※ Please note: This article was translated by AI and may contain errors.