Qilin Ransomware attacks South Korean MSP, 28 Financial Institutions affected, leaking 2TB of data.

PANews, November 27 - According to The Hacker News, the Qilin ransomware group initiated the “Korean Leaks” supply chain attack by breaching GJTec, an IT service provider in South Korea, resulting in 28 financial companies being affected and over 1 million files totaling 2TB of data being stolen. Bitdefender's investigation found that this operation is related to the North Korean-backed APT “Moonstone Sleet” and is suspected to be in collaboration with the Russian-speaking Qilin group, aiming to exert pressure on the South Korean financial market.