A threat actor group has publicly announced an organized cyber campaign, dubbed #OpSouthKorea, targeting South Korean infrastructure. The announcement was made via the group’s Telegram channel, which included calls for participants to join the operation and disrupt various South Korean institutions.
The group alleges that the campaign is a response to South Korea’s allocation of $200 million in humanitarian aid to Ukraine for 2024. The group, expressing pro-Russian sentiments, labeled South Korea as a “Russophobic country” and declared their intention to “destroy its infrastructure.”
The first phase of the operation, according to the group’s posts, began with an attack on South Korea’s main stock exchange, the Korea Exchange (KRX). The group published links to reports they claim document the success of these attacks, encouraging others to join the campaign by using the hashtag #OpSouthKorea in their own posts.
