North Korean cyberattacks — 4.4M Financial IP Probes Spark Security Alarms – The Korea Daily

North Korean cyberattacks — 4.4M Financial IP Probes Spark Security Alarms  The Korea Daily

South Korea detects over 4.4 million North Korean IP access attempts targeting financial institutions, highlighting advanced state-sponsored cyber threats. Over 4.4 million access attempts originating from North Korean IP address bands have been detected targeting South Korean financial institutions, drawing intense scrutiny toward Pyongyang’s expanding North Korean cyberattacks capabilities. North Korea has long cultivated cyberwarfare as a core asymmetric strategy alongside its nuclear and missile programs. Analysts indicate that the regime deploys specialized hacking organizations to secure ruling funds, steal military and diplomatic secrets, and utilize cyberspace as both an information warfare battlefield and a bypass for international sanctions. Financial authorities recently distributed guidelines regarding suspicious access attempts targeting financial companies and cryptocurrency exchanges from North Korean IPs through the Financial Security Integrated Control System, known as ‘FIRST’.

According to authorities, a total of 4,404,101 scanning attempts exploring financial systems were identified from multiple IPs allocated to North Korea between 3 a.m. on the 21st and the issuance of the official notice. This marks the first time such extensive North Korean IP access activity has been officially confirmed amid a recent string of financial hacking incidents this month. Although it is difficult to definitively attribute these scans directly to North Korea due to potential IP spoofing, falsification, or routing bypasses—and no actual breaches or data exfiltration have been confirmed yet—experts