{
	"id": "9e8e64c3-5ed9-45ec-84b3-401d07ce8c08",
	"created_at": "2026-04-06T00:14:45.586845Z",
	"updated_at": "2026-04-10T13:12:42.177753Z",
	"deleted_at": null,
	"sha1_hash": "ab5213569ca05b7bd28b6d8c993b2dd0f293012c",
	"title": "Seoul accuses pro-Kremlin hackers of attacking websites over decision to monitor North Korean troops in Ukraine",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 78630,
	"plain_text": "Seoul accuses pro-Kremlin hackers of attacking websites over\r\ndecision to monitor North Korean troops in Ukraine\r\nBy Daryna Antoniuk\r\nPublished: 2024-11-08 · Archived: 2026-04-05 14:15:45 UTC\r\nPro-Russia hacker groups have ramped up attacks on South Korean organizations following Seoul’s decision to\r\nsend observers to Ukraine after North Korean troops joined Russian forces on the frontlines.\r\nAccording to a statement from the South Korean president’s office on Friday, the country’s cyber agencies have\r\ndetected an increase in Russia-linked attacks, primarily targeting civilian and government websites.\r\n“Access to some organizations' websites has been temporarily delayed or disconnected, but aside from that, there\r\nhas been no significant damage,” the statement said.\r\nOn Thursday, South Korea's presidential office held an emergency meeting to discuss the government’s response\r\nto the recent and anticipated cyber threats from Russia.\r\nCyberattacks by pro-Russian hacktivist groups targeting South Korea have occurred sporadically in the past but\r\nhave increased since North Korea sent troops to Russia to support its war in Ukraine, according to South Korean\r\nauthorities.\r\n“Since attacks are likely to continue in response to the situation in Ukraine, we’re planning to boost our cyber\r\nthreat readiness by monitoring threats and maintaining close cooperation with relevant organizations,” the\r\npresident’s office stated.\r\nAmong the pro-Russian hacktivist groups claiming responsibility for the attacks on South Korea are relatively\r\nunknown threat actors like Z Pentest and Alligator Black Hat, as well as NoName057(16), known for its\r\ndistributed denial-of-service (DDoS) attacks on European targets.\r\nThe hackers claimed to have accessed equipment at a warehouse storing Ukrainian grain in a South Korean city,\r\nsharing a video purportedly showing them breaching the granary’s electronic controls for loading grain elevators.\r\nThey also claimed to have hacked other critical South Korean industrial facilities, though none of these attacks\r\nhave been confirmed by local authorities.\r\nEarlier this week, South Korea reported that thousands of North Korean troops are now deployed on Russian soil\r\nto support its war on Ukraine. On Friday, Ukraine’s President Volodymyr Zelensky confirmed that North Korean\r\ntroops are actively fighting Ukrainian forces in Russia's Kursk region.\r\nAccording to Zelensky, nearly 11,000 North Korean soldiers are currently stationed in Russia near the Ukrainian\r\nborder. Ukraine’s allies, including South Korea, the U.S. and the  European Union, have condemned Moscow’s\r\ncooperation with Pyongyang on the frontlines.\r\nhttps://therecord.media/seoul-accuses-pro-kremlin-hackers-of-attacking-websites-ukraine\r\nPage 1 of 3\n\nGet more insights with the\r\nRecorded Future\r\nIntelligence Cloud.\r\nLearn more.\r\nNo previous article\r\nNo new articles\r\nDaryna Antoniuk\r\nis a reporter for Recorded Future News based in Ukraine. She writes about cybersecurity startups, cyberattacks in\r\nEastern Europe and the state of the cyberwar between Ukraine and Russia. She previously was a tech reporter for\r\nForbes Ukraine. Her work has also been published at Sifted, The Kyiv Independent and The Kyiv Post.\r\nhttps://therecord.media/seoul-accuses-pro-kremlin-hackers-of-attacking-websites-ukraine\r\nPage 2 of 3\n\nSource: https://therecord.media/seoul-accuses-pro-kremlin-hackers-of-attacking-websites-ukraine\r\nhttps://therecord.media/seoul-accuses-pro-kremlin-hackers-of-attacking-websites-ukraine\r\nPage 3 of 3",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://therecord.media/seoul-accuses-pro-kremlin-hackers-of-attacking-websites-ukraine"
	],
	"report_names": [
		"seoul-accuses-pro-kremlin-hackers-of-attacking-websites-ukraine"
	],
	"threat_actors": [
		{
			"id": "b05a0147-3a98-44d3-9b42-90d43f626a8b",
			"created_at": "2023-01-06T13:46:39.467088Z",
			"updated_at": "2026-04-10T02:00:03.33882Z",
			"deleted_at": null,
			"main_name": "NoName057(16)",
			"aliases": [
				"NoName057",
				"NoName05716",
				"05716nnm",
				"Nnm05716"
			],
			"source_name": "MISPGALAXY:NoName057(16)",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "6c532a3a-8977-4f5e-aa4f-311e19952e2f",
			"created_at": "2026-03-24T02:00:04.630235Z",
			"updated_at": "2026-04-10T02:00:03.989041Z",
			"deleted_at": null,
			"main_name": "Z-Pentest Alliance",
			"aliases": [
				"Z-Pentest"
			],
			"source_name": "MISPGALAXY:Z-Pentest Alliance",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		}
	],
	"ts_created_at": 1775434485,
	"ts_updated_at": 1775826762,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/ab5213569ca05b7bd28b6d8c993b2dd0f293012c.pdf",
		"text": "https://archive.orkl.eu/ab5213569ca05b7bd28b6d8c993b2dd0f293012c.txt",
		"img": "https://archive.orkl.eu/ab5213569ca05b7bd28b6d8c993b2dd0f293012c.jpg"
	}
}