C5_APT_SKHack.pdf (371 KB)

The SK Communications breach stole personal details for up to 35 million CyWorld and Nate users after attackers compromised a South Korean software company update server. The supply-chain compromise delivered a trojanized software update that infected more than 60 SK Communications systems before customer data was exfiltrated. The report describes trusted-update abuse, downstream enterprise compromise, and large-scale personal-information theft, but does not provide modern reusable IOCs beyond the historical infrastructure and malware context.