Yes24 the largest Internet bookstore in Korea suffered another eatdog situation due to ransomwa MK
pLanguageppChange fontppAppAppAppAppShareppTOPppMost readppLanguageppChange fontppAppAppAppAppShareppppYes24 the largest Internet bookstore in Korea suffered another eatdog situation due to ransomware hacking in two months Confidence in the overall security system has been shaken as the same attack has been repeated less than two months after the fiveday connection failure in JuneppYes24 was attacked by ransomware from outside at 430 am on the 11th and access to its website and app was completely blocked The company immediately shut down the system and launched a security check and used backup data to complete service recovery at 1130 am about seven hours laterppAt the time of the first incident in June the Korea Internet Security Agency KISA pointed out that the biggest problem is that the offsite backup system has not been established so it took five days to recover because there was no external storage and cloud backup This time the backup operated to prevent the spread of damage but it is pointed out that there are still loopholes in the response system in that the same type of attack occurred againppIn particular KISA did not rule out the possibility of additional ransomware attacks in connection with this incident and launched an onsite investigation This is to check the overall server and network environment and recovery process of Yes24 to come up with measures to prevent recurrenceppAt the time of the first damage in June this year Yes24 was criticized for not immediately notifying users of the hacking even though the app and Internet communication network were paralyzed and only after reporting the damage to KISAppA week after the incident he issued an apology in the name of the corepresentative promising to reexamine the security system from the ground up and introduce an external security advisory group to strengthen resilience from system design to operation but he suffered the same damage again in two monthsppThe security industry warns that it has provided hackers with a bad precedent that Korea is a market that can be reattacked if money is paidppSome in the industry believe Yes24 suffered a longterm failure in June and negotiated with the hacker to restore it It is said that Korea can be seen as an attractive market for current criminals with high Bitcoin pricesppAnalysts also say that if there is a perception that attacks in Korea can be paid they are likely to be targeted by international hacker organizationsppIn fact cyber infringement incidents are increasing every year in KoreappAccording to KISA the number of domestic infringement incidents has increased to 1142 in 2022 1277 in 2023 and 1887 in 2024 with 1034 cases already received in the first half of 2025 In particular 939 of ransomware damage was concentrated in midsized and smallsized companies 444 of the respondents were infected with backup data during the attack and 232 of the organizations did not back up at allppInformation technology IT services or distributors that are closely related to daily life are a major target for hackers in that they are likely to engage in negotiations due to a large image impact in the event of hacking damage In fact the IT sector was the highest at 377 followed by manufacturing 152 and wholesale and retail 128ppExperts stress the need for penetration path analysis and full reconstruction of security systems beyond simple recovery A security industry official said A quick cooperation system between the government and companies is essential adding This KISAs onsite investigation should also be an important opportunity to prevent a recurrenceppYes24 said in the afternoon As of 1130 am all services are normally accessible and available as of the end of the day due to service restoration work adding We operated a companywide emergency response system immediately after the accident to immediately block the system and take security check measures and complete the KISA reportppWe deeply apologize for the inconvenience and concern caused in using the service he said We will continue to strengthen security systems and operational policies to provide more stable services in the futureppThis year there have been a series of incidents of threats by sending emails and faxes or writing online posts claiming that bombs have been installed in major domestic institutions such as department stores and large stadiumsppIt is analyzed that this is because nonmainstreamers who have not adapted to society imitate crimes as competition intensifies in our societyppCitizens are angry saying I am anxious because of the threat of a terrorist who has no substance and Even so life is being hindered because we cannot ignore the possibility of terrorism The police will strictly deal with the case of public intimidation while providing preventive education to teenagers and others and will also seek compensation for damages if a large number of police forces are mobilizedppAccording to the police and others on the 11th a threatening fax was sent to the National Human Rights Commission of Korea earlier in the day to the effect that there are explosives in five department stores including Seoul and Gwangju and the police launched an investigation On the previous day a fax was received saying We installed explosives at KSPO Dome Gymnastics Stadium in Olympic Park Songpagu Seoul and more than 2000 people were evacuated and police searched but no explosives were foundppAccording to the police the fax number that predicted the KSPO Dome terror was the same as the fax number that predicted the Hwangsan Terror for educational institutions and students on the 7th The name of the caller was only different with lawyer Cho Hakseok for the stadium terrorism and Karasawa Takahiro for the sulfuric acid terrorismppIn particular threats sent by fax or email under the name of Takahiro Karasawa first appeared in August 2023 with the content that they would detonate a bomb in Seoul unless they killed Lee Jaemyung then chairman of the Democratic Party of Korea and continued until early this year before reappearing eight months laterppThis year there are continuous fax threats to terrorize students In February this year a fax was received at a local immigration office branch office saying in Japanese We have already installed bombs in all middle schools in Seoul and will bomb them at 1633 on February 14ppAccording to the police 44 faxes and emails related to the terrorist threat of the socalled Japanese lawyer have been received However the police could not confirm whether all of them were committed by the same criminalppTerrorist posts posted online this month are also disturbing citizens On the 5th an article was posted online to blow up the headquarters of Shinsegae Department Store in Junggu Seoul causing 4000 citizens at the department store to evacuate On the 6th and 11th another announcement of the bombing of the department store was posted and the police were dispatched but as it turned out to be a false report critics pointed out that it was a waste of police and administrative powerppLee Woonghyuk a police professor at Konkuk University said Social nonmainstreamers post a notice to confirm their presence adding The threat notice acts as a catalyst for other nonmainstreamers imitation criminal psychology to occur again There is a need to diagnose the current situation nationally he saidppThe police plan to respond strictly to a series of bombing threats by applying the crime of public intimidation In addition the police plan to provide preventive education to teenagers against public intimidation and to review claims for damages if necessary if a number of police forces including police commandos are mobilizedpp20251012 174044pp20251012 065417pp20251012 202751pp20251013 142141pp20251012 193359pp20251013 135242pp20251011 202358pp20251013 125440pp20251012 125325pp20251011 193607pp This article was translated using AI technology for reader conveniencepp
Maeil Business NewpaperMK provides these translations as they are and makes no warranties of any kind either
explicitly or implicitly regarding accuracy reliability and marketability suitability for a particular purpose
etc of translation
Please be informed that the content provided may not be translated accurately due to limitations in machine
translation before using this service
pp
Copyright c 매경AX Maeil Business News Korea mkcokr All rights reserved
Prohibition of unauthorized reproduction redistribution and use of AI learning
p
Maeil Business NewpaperMK provides these translations as they are and makes no warranties of any kind either
explicitly or implicitly regarding accuracy reliability and marketability suitability for a particular purpose
etc of translation
Please be informed that the content provided may not be translated accurately due to limitations in machine
translation before using this service
pp
Copyright c 매경AX Maeil Business News Korea mkcokr All rights reserved
Prohibition of unauthorized reproduction redistribution and use of AI learning
p