January 2025 Security Issues in Korean & Global Financial Sector

This report documents multiple active cyber incidents targeting the financial sector: a database leak from a Mexican state-run financial institution being sold on BreachForums, a BASHE ransomware operation claiming theft and publication of customer records from a major Indian bank with extortion threats, and RootDos-conducted DDoS attacks that disrupted online banking and ATM services for a Swiss bank affecting ~1.7M customers; the report also provides sample evidence and MD5 indicators of compromise.