South Korea Warns of State-Backed Watering Hole Attacks

South Korean agencies warn of an active, state-backed campaign using phishing and watering-hole attacks to compromise legitimate websites and exploit vulnerabilities in Korean financial/security software, resulting in silent backdoor infections, credential and data theft, lateral movement across networks, and potential extortion; the advisory covers affected sectors (media, healthcare, manufacturing), specific attack techniques, and recommended mitigations including patching, MFA, network segmentation, and phishing awareness.