Hacking groups believed to be backed by communist nations such as Russia, China, and North Korea are shaking up global markets. The world's largest cryptocurrency exchange has been breached, and supermarkets in Europe have faced refrigeration failures. Evidence has emerged that North Korean hackers targeted South Korean users, prompting discussions about establishing a new government agency to respond to hacking threats.
According to Microsoft's 'Digital Defense Report 2026' released on November 3, hacking groups linked to China, Russia, and North Korea have all integrated AI into their operations. This technology has been utilized for targeted reconnaissance, social engineering, and the development of malware and attack codes.
South Korean cybersecurity firm S2W reported that there were 158 cyberattacks linked to North Korea, China, and Russia in the first half of this year, a 7.5% increase from the previous half-year's 147 incidents. North Korea accounted for the majority with 99 attacks, while Russia saw a 30% increase to 26 incidents. Although China experienced a 17.5% decrease to 33 incidents, long-term espionage activities targeting communication networks continued.
On November 2, at least three European countries, including Sweden, Belgium, and Luxembourg, reported that refrigeration and freezing equipment in major supermarkets malfunctioned, with temperatures rising to 50 degrees Celsius. This followed a similar incident on October 12, when hundreds of supermarkets in France experienced equipment failures, leading to food spoilage and even fires. Russian hacking groups have been identified as the likely perpetrators.
The U.S. Department of Defense is investigating suspected hacking incidents involving malfunctions at more than six military base stores in August. On October 29, the world's largest cryptocurrency exchange, Binance, reported a theft of $6.3 billion, which the FBI attributed to North Korean hackers.
In a report released on October 21, Microsoft noted that the China-linked group 'Storm-0940' has been using an open-source tool called 'ARTEX' since September to automate the infiltration process, attacking hundreds of targets. A recent report by cybersecurity firm ESET indicated that hacking groups from Russia, Iran, North Korea, and China are using AI to create malware, phishing emails, and fake websites.
Evidence has also surfaced indicating that North Korea is specifically targeting South Korea. In a separate report released by Microsoft on October 29, three North Korean hacking groups were classified as top-tier threats using AI for all their attack operations. The North Korean group 'Onyx Slit' created over 100 customized PDF bait documents aimed at South Korean users between August and September, and began using 'ARTEX' at the end of October.
As sporadic hacking incidents resemble a cyber war, President Yoon Suk Yeol has directed the establishment of a government-wide cybersecurity agency, referred to as the 'Cybersecurity Tsar,' to coordinate responses across public and private sectors. The government plans to release a comprehensive information security strategy and enhance inspections in public, financial, and telecommunications sectors, while expanding investigative powers to conduct field investigations without corporate reports.
The National Intelligence Service has initiated emergency security inspections at over 2,100 locations, including central government agencies and local governments. However, concerns have been raised that the vacancy in leadership at the Korea Internet & Security Agency (KISA), which should be at the forefront of responding to hacking incidents in the private sector, is hindering the government's response efforts.
A political source stated, 'While the President's directive has led to emergency security inspections led by the National Intelligence Service, it remains challenging to extend these efforts to private companies. The National Intelligence Service is limited by current laws in addressing private hacking incidents, and KISA is operating under an acting leadership structure, leaving the situation without a responsible figure.'
* This article has been translated by AI.
Copyright ⓒ Aju Press All rights reserved.