Leakage of personal information such as 400 people’s namesOutside departments Attacks IPs received and recognizedFinancial sector hacking warnings, butContinued controversy over supervisory blind spots 사진 확대 [Maekyung DB] Even after the hacking attack, Saemaul Geumgo failed to properly grasp it for nearly 60 hours.According to data from the Ministry of Public Administration and Security secured by Rep. Sohn Myung-soo of the Democratic Party of Korea on the 14th, the first hacking infringement occurred on the website of the Korea Federation of Community Credit Cooperatives at 9:09 a.m. on the 10th.The problem is that Saemaul Geumgo properly recognized the damage only at 8:55 p.m. on the 12th, more than two days later. He realized that the personal information of about 400 mutual aid members was leaked after nearly 60 hours.The hack robbed the mutual aid members of their customer number, name, encrypted social security number, account number, date of birth, mobile phone number, home phone number, and home address.The delay in recognition seems to be due to the impact of the attack on the “parameter modulation.” A parameter modulation attack is a hacking method that deceives a system by secretly changing a specific value of normal transaction data.It is characterized by slightly manipulating information that users cannot directly change. They often don’t notice attacks quickly because they only change part of the data that comes and goes during the normal transaction process. In particular, infringement damage occurs mainly when verification of access rights is loose.In fact, Saemaul Geumgo is also known to have belatedly noticed the damage only after receiving several IPs used for parameter modulation attacks from the Financial Security Service. In addition, Saemaul Geumgo estimates that an artificial intelligence (AI) hacking program was used in the attack.However, given that the damage occurred immediately after simultaneous hacking attacks using AI on the entire financial sector, criticism is being raised over Saemaul Geumgo’s complacent security awareness. 사진 확대 Rep. Sohn Myung-soo of the Democratic Party of Korea (photo source = lawmaker’s office) In fact, the financial authorities urgently convened a chief executive of the financial industry on the 4th to emphasize a thorough security posture against AI hacking damage. Some point out again that Saemaul Geumgo is in the blind spot of management supervision. Saemaul Geumgo serves as a financial institution, but since it is a cooperative for local residents, the administration authority is in the Ministry of Public Administration and Security.Lawmaker Sohn Myung-soo said, “Although the financial sector has been issued a hacking alert, personal information leakage accidents continue,” and stressed, “The supervisory system should be reorganized to prevent blind spots in security management due to different supervisory agencies.” “The financial authorities should thoroughly re-examine whether the existing security system can properly respond to new attack methods such as hacking using AI,” he said.
Click Here For The Original Source.
——————————————————–
