Hackers breach South Korea's FSI, the agency probing the bank-hack wave

South Korea’s Financial Security Institute (FSI), the agency investigating a wave of bank hacks, has itself been hacked. Attackers got hold of about 300 personal records of people who work in the financial sector. How did hackers break into South Korea’s financial security agency? South Korea’s Financial Security Institute (FSI) got hacked after the attackers exploited a weak spot in the institute’s login system. The hacker pretended to be an official from the Financial Supervisory Service (FSS) and gained access to the FSI’s system through a backup access page meant for times when text-message verification is not available. That page skipped the usual checks. The fake FSS account used by the attackers can see files from many institutions at once, unlike a normal company that can only open its own.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to Cryptopolitan.