Qilin Ransomware Group Strikes South Korean IT Firm in Major Data Breach

A major data breach has hit South Korea’s GJTec, an IT service provider, as the Qilin ransomware group launched a sophisticated attack on its supply chain. The group stole 2TB of data, including over one million files, impacting 28 financial companies. Bitdefender’s investigations link this operation to the North Korean-backed APT group ‘Moonstone Sleet,’ suggesting a collaboration with the Russian-speaking Qilin organization. This attack appears aimed at exerting pressure on the South Korean financial market.