Korea’s Largest Telco KT Fined $38m After Femtocell Campaign

South Korea’s largest telecom operator KT was investigated and fined after attackers used a stolen femtocell certificate to create a rogue femtocell that intercepted mobile traffic and enabled unauthorized micropayments, resulting in PII exposure for 16,647 users and financial losses for hundreds of customers; investigators also discovered backdoor malware on 38 internal servers and evidence of SQL injection and other exploited vulnerabilities amid inadequate access controls and deleted logs.