25.09.02.Today News : KT and LG Uplus Hacking Allegations Under Government Investigation
📍North Korean and Chinese hacker groups suspected as telecom firms deny direct breach
The South Korean government has launched an official investigation into allegations that KT and LG Uplus suffered major hacking attacks. While suspicions point to both North Korean and Chinese hacker groups, the telecom companies insist there is no evidence of direct breaches, fueling ongoing controversy.


■ Government begins investigation into possible breaches
The Ministry of Science and ICT, together with the Korea Internet & Security Agency (KISA), has started on-site inspections and forensic analysis of KT and LG Uplus systems after reports of large-scale hacking surfaced.
■ North Korea or China? Conflicting claims on hacker origins
In early August, the U.S. hacking magazine Phreak reported that a North Korean group, suspected to be “Kimsuky,” had targeted South Korean government agencies and private firms. The leaked data reportedly included information from KT and LG Uplus.
However, a subsequent analysis by Korea University’s Graduate School of Information Security suggested the attacks were more likely carried out by Chinese hackers. According to Professor Kim Hui-gang, leaked data from LG Uplus included source codes for account management systems, server information, and IDs of employees and contractors. KT data reportedly included web server certificates and private keys.
■ Telecoms deny direct evidence of hacking
Both telecom companies admitted the leaked data was theirs but denied their internal servers were directly breached. They pointed to the possibility of data leaks through partner companies or other external routes. Representatives from KT and LG Uplus said they are fully cooperating with the government investigation.
■ Investigation sparked by white-hat hacker tip-off
The case began in July when the National Intelligence Service and KISA received a tip-off from an anonymous white-hat hacker. While KISA asked the two telecoms to file official breach reports, they refused on the grounds that no hacking traces were found. Lawmakers have since criticized the legal loophole that prevents the formation of a joint public-private investigation team without company consent.
■ Government pledges transparency
An official from the Ministry of Science and ICT stated that due to the vast volume of server data, the investigation will take time, but promised that any confirmed breaches would be disclosed transparently to the public.

댓글 영역