Gov’t Servers in South Korean City ‘Infected with Crypto Mining Malware’

cryptonews.com:

Crypto mining malware has been found on two government servers in the South Korean city of Daejeon, an audit has found.

Per MBN, the nation’s Ministry of Public Administration and Security commissioned biannual audits of the city government’s servers.

During the most recent audit, in June last year, auditors found that Daejeon City’s “information system was infected with malicious code.”

The code, they said was “used for purposes such as virtual currency mining.”

The auditors said they had found “a series of cyber breaches” on two of the city’s servers.

They said that one of the compromised servers was “infected with” mining malware that made use of “exposed” administrator account passwords.

Another server, they said, had been used “as a hacking transit point.” The point allowed attackers to “further infect” the network with crypto mining malware.

The city’s cyber response team said they had detected “abnormal” activities “within eight days.”

The team then quarantined the network and discovered the malicious code. It then reported details to the National Intelligence Service (NIS).

The NIS is South Korea’s top intelligence agency, and deals with breaches of public data.

The auditors, however, stated that a lack of “additional security measures” had allowed hackers to strike with impunity.