According to The Korea Herald, an investigation revealed that KT servers had been infected with malware and that the company failed to promptly notify regulatory authorities [1]. The report stated that the infected servers involved systems related to customer personal data, prompting subsequent investigations into data exposure and inadequate security measures [2]. The infection period, malware name, and exposed data fields are subject to the original source text, and unverified technical details are not extrapolated here [2].
South Korean Media Reports Investigation Finding KT Concealed Malware Infection and Security Flaws
1 min read
- Disclosed
- Nov 6, 2025
- Published
- Nov 10, 2026
- Last updated
- Nov 7, 2026
- CVSS basis
- Our assessment
- Attack vector
- Data type
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Telecom
What to do nowOur advice
The infection period, malware name, and exposed data fields are subject to the original source text, and unverified technical details are not extrapolated here [2].
Timeline
- Incident publicly disclosed[1]
Technical details
Source-Supported Details
South Korean media reported that authorities investigated malware infections and reporting failures at KT, noting that customer data may have been affected. This entry relies on news reporting and does not extrapolate threat actor group names not present in the source text [1].
Source excerpt: "People are seen in front of the KT Corp." [1].
Source excerpt: "The malware enables remote attackers to bypass firewalls and maintain long-term access to compromised systems. Despite detecting the breach, KT failed to notify authorities and attempted to address the issue internally, the team said Thursday." [2].
References
Media2
- [1]
“People are seen in front of the KT Corp.”
- [2]The Korea Times2025-11-06
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.