South Korea has conducted a joint maritime cybersecurity drill to strengthen cooperation between shipping companies and authorities in detecting, responding to and recovering from cyberattacks.
According to the Korea Internet & Security Agency (KISA), the exercise took place on November 3, 2026, at BEXCO in Busan, bringing together five shipping and shipmanagement companies, HMM Ocean Service, POS SM, Hyundai LNG Shipping, KLNG and G-Marine Service, alongside the Korea Coast Guard, Korea Shipowners’ Association and Korea Ship Managers’ Industry Association.
The exercise simulated cyberattacks involving malicious emails impersonating port authorities and compromised software updates distributed through an infected supplier’s computer. The scenario included malware infecting onboard computers and communication servers, disrupting communications between vessels and shore-based operations.
The drill covered four stages of incident response:
Threat detection and information sharing: Identifying suspicious emails and communicating potential threats to other companies.
Malware response and recovery: Removing malicious software and restoring affected systems following the execution of infected email attachments.
Supply chain attack response: Addressing cyber intrusions involving AI-based attack tools and compromised software updates.
Coordinated incident management: Supporting incident analysis and sharing threat intelligence among shipping companies and relevant authorities.
KISA highlighted that growing connectivity between ships and shore-based systems, including satellite communications and remote support services, is increasing exposure to cybersecurity threats.
The agency also emphasized the importance of coordinated responses, particularly when multiple shipping companies rely on the same systems or service providers. A vulnerability or attack method identified by one company may also affect others, making timely information sharing essential.
KISA said it would share the lessons identified during the exercise with participating companies and support improvements to their incident response procedures.
The agency further warned that maritime cyber incidents can extend beyond disruptions to onboard information systems, potentially affecting vessel operations and logistics services.
——————————————————-
Click Here For The Original Source.
