The Qilin ransomware group claims to have breached five South Korean financial firms in a coordinated attack. The targeted victims are Broad High Asset Management Co., ST Asset Management Co., EOS Asset management, Orum Asset management, and Dblock Asset Management Co., all of which are asset management companies operating within the country’s financial sector. The group has framed these attacks as part of a larger campaign intended to destabilize the South Korean stock market.
According to the actor, the breach has resulted in the exfiltration of highly sensitive corporate and personal data. The compromised information reportedly includes all financial information, strategic planning documents, details of past deals, trade secrets, and the personal information of company employees and investors.
