MEDIUMApt
Global

Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts

·Source: The Hacker News

Updated:

Executive Summary

South Korean authorities and four security firms have disclosed a state-sponsored campaign that compromised trusted domestic websites. The attackers used those sites to exploit locally installed financial-security software and infect targeted visitors with SIGNBT or COPPERHEDGE backdoors. A compromised page could infect a system running a vulnerable AnySign4PC version without a prompt or

Analysis

South Korean authorities and four security firms have disclosed a state-sponsored campaign that compromised trusted domestic websites. The attackers used those sites to exploit locally installed financial-security software and infect targeted visitors with SIGNBT or COPPERHEDGE backdoors. A compromised page could infect a system running a vulnerable AnySign4PC version without a prompt or
Source Attribution

Originally published by The Hacker News on Jul 30, 2026.

Related Threats

MEDIUMApt

OctLurk and SilkLurk: newly identified tailored backdoors in cyber-espionage campaign in Central Asia

Our experts discovered OctLurk and SilkLurk, backdoors operating primarily in memory, targeting Central Asia. They inject plugins to launch shells, scan networks, dump credentials, and keylogging.

Securelist (Kaspersky)
MEDIUMApt

A Scattered Spider member was indicted. Microsoft’s GDID went to trial.

A recently released criminal complaint against Peter Stokes , an alleged member of the Scattered Spider cybercrime group , reveals previously unpublicized details about Windows telemetry . Microsoft has never exactly had a reputation for being privacy-focused, however the complaint reveals the important part played by Microsoft’s Global Device Identifier (GDID), a persistent identifier tied to a W

CSO Online
CRITICALApt

CISA unveils a six-step blueprint for isolating critical infrastructure during cyberattacks

Most IT operators understand that critical infrastructure should be isolated in crisis situations, but many don’t know how to do it in a way that maximizes security and minimizes disruption. Now, several global agencies are offering a step-by-step action plan, CI Fortify . Released by the US Cybersecurity and Infrastructure Security Agency (CISA) and several Five Eyes security agencies across the

CSO Online