Qilin ransomware attacks Korean MSP, 28 financial institutions affected with 2TB of data leaked

According to ChainCatcher, citing The Hacker News, the Qilin ransomware group launched a "Korean Leaks" supply chain attack by breaching the Korean IT service provider GJTec, resulting in 28 financial companies being affected and over 1 million files totaling 2 TB of data being stolen.

Bitdefender's investigation found that this operation is related to the North Korea-linked APT "Moonstone Sleet," which is suspected to be collaborating with the Russian-speaking Qilin group, aiming to put pressure on the South Korean financial market.