- KISC’s incident response staff has been reinforced, and a 24/7 emergency response system has been put into operation.

- Security information has been promptly shared through Bohonara and C-TAS, and security checks have been recommended to about 28,000 companies that have reported the designation of a CISO.

- MSIT is closely cooperating with FSC, FSS, and other relevant authorities while maintaining a support system for deploying KISC experts to the field as needed.

The Ministry of Science and ICT (MSIT, Deputy Prime Minister and Minister: Bae Kyung-hoon) announced that, following the recent hacking incidents in the financial sector, it has begun operating an emergency response system together with the Korea Internet & Security Agency (KISA) and has set out to take all possible measures to prevent similar attacks from spreading.

Currently, the relevant authorities, including the Financial Services Commission (FSC), Financial Supervisory Service (FSS) and Financial Security Institute (FSI), are leading the investigation and response to the hacking incidents, while MSIT and KISA are stepping up their response to cyber threats to prevent similar attacks from spreading to the private sector and causing further damage.

First of all, to respond promptly to the risk of further damage resulting from the recent hacking incidents in the financial sector, the response system of KISA’s Korea Internet Security Center (KISC) has been strengthened. In addition to intensifying monitoring of major companies’ websites and reinforcing incident response staff, an emergency response system has been put into operation to keep emergency response teams on standby at all times.

In addition, cyber threat information has been provided through KISA’s Bohonara and the Cyber Threat Analysis & Sharing (C-TAS*) system to help agencies and companies strengthen their own security measures. On October 4, emails were sent to about 28,000 companies that have reported the designation of a Chief Information Security Officer (CISO) to recommend security checks. The emails included a link to the security notice.

* C-TAS: A platform for sharing information such as malicious code, attacker IP addresses and the latest cyber threat trends to enable a prompt response to cyberattacks. It has approximately 5,900 members.

※ Recommendation posted on the Bohonara website (www.boho.or.kr → [Bulletin Board] → [Security Notice]): “Recommendation on Strengthening Corporate Security to Prevent Cyberattacks Similar to Recent Incidents” (October 3)” 

In addition, relevant threat information on the IP addresses of overseas attackers identified by FSI has been provided to the relevant cloud service providers, which have been asked to take necessary measures, such as blocking malicious activity.

Meanwhile, MSIT is continuing to share information with relevant authorities such as FSC. The ministry is also preparing personnel and response systems in advance so that experts, including those from KISA, can be sent to the site immediately if FSC, FSS or other relevant agencies request support, and will work closely with relevant agencies throughout the investigation into the incidents.

MSIT will continue to closely monitor cyber threat trends targeting private-sector information and communications services, including those in the financial sector, and make every effort to prevent similar incidents from occurring and further damage from spreading by promptly sharing cyber threat information and cooperating closely with relevant agencies.

For further information, please contact the Public Relations Division (Phone: +82-44-202-4034, E-mail: msitmedia@korea.kr) of the Ministry of Science and ICT.

Please refer to the attached PDF.