Korea Internet & Security Agency puts 24-hour response system in operation

Authorities mobilize to prevent spread to private sector and further damage

ATM machines at several banks in Seoul on Sunday. [Yonhap]
ATM machines at several banks in Seoul on Sunday. [Yonhap]

The Ministry of Science and ICT said Sunday it has activated an emergency response system with the Korea Internet & Security Agency in connection with a recent series of hacking incidents targeting the financial sector.

The Financial Services Commission, the Financial Supervisory Service and the Korea Financial Security Institute are leading the investigation and response to the attacks, while the Ministry of Science and ICT and the Korea Internet & Security Agency are working to prevent the attacks from spreading to the broader private sector and causing additional damage.

The ministry reinforced the response capabilities of the Korea Internet & Security Agency's Internet & Security Center, activating a round-the-clock emergency system that includes enhanced monitoring of major corporate websites, additional incident-response personnel and a standby rapid-deployment team.

The ministry also directed cyber threat information to institutions and companies through the Boho Nara platform and the Cyber Threat Intelligence Analysis and Sharing system so they can strengthen their own security measures. It sent security inspection advisory emails to approximately 28,000 companies that have registered a chief information security officer.

For overseas attacker IP addresses identified by the Korea Financial Security Institute, the ministry asked the relevant cloud service providers to take necessary steps — including blocking malicious activity — by sharing threat information with them.

The ministry said it has prepared personnel and response systems in advance so that specialists from the Korea Internet & Security Agency can be deployed immediately to the scene should the Financial Services Commission, the Financial Supervisory Service or other agencies request support.

Customer data has been confirmed leaked from Shinhan, KB Kookmin, Hana and BNK Busan Bank among major lenders, and from Hyundai Capital Services, Yegaram Savings Bank and Welcome Savings Bank in the secondary financial sector. Financial authorities had originally planned to have each financial institution conduct its own inspection through the holiday period ending Monday and report the results on Wednesday, but moved the meeting up to Sunday after damage spread to the secondary financial sector over the weekend.


hope@heraldcorp.com