A state-sponsored cyber campaign has compromised trusted South Korean websites to exploit vulnerabilities in AnySign4PC, a widely-used financial security software. The attackers leveraged these compromised sites to silently install SIGNBT or COPPERHEDGE backdoors on visitors' systems without user interaction or prompts, targeting users with vulnerable versions of the software.
South Korean authorities and four security firms have disclosed a state-sponsored campaign that compromised trusted domestic websites. The attackers used those sites to exploit locally installed financial-security software and infect targeted visitors with SIGNBT or COPPERHEDGE backdoors. A compromised page could infect a system running a vulnerable AnySign4PC version without a prompt or
Originally published at thehackernews.com
60-minute technical evaluation, no obligation. We'll map the ideas in this article to your environment.
