Archive · 6 Nov 2025
KT Corp. Concealed Malware Infections and Security Failures
Imagine a big phone company, KT, had some secret computer sicknesses, like malware, on their computers.
Instead of telling the grown-ups in charge right away when they found out, they tried to fix it themselves.
This sickness let bad guys steal people's private information, like names and phone numbers.
The bad guys also used special mini-towers to trick people's phones and steal money information.
Because KT didn't tell the government quickly, they might get in trouble, like having to pay a big fine.
Now, KT is saying sorry and trying to make things right for their customers.
KT Corp. concealed malware infections and security breaches that led to a data theft incident.
A government investigation found 43 KT servers infected with BPFDoor malware between March and July 2024.
The company did not notify authorities, attempting to handle the issue internally, which exposed customer data.
Vulnerabilities in KT's femtocell management allowed unauthorized access and interception of payment authentication data.
KT faces potential legal measures, including fines and investigations into whether laws were breached, and has apologized for the delay in reporting.
- Who
- KT Corp. (South Korea's second-largest mobile carrier)
- What
- Concealed critical malware infections and security failures that led to a hacking and data theft incident.
- When
- Malware detected between March and July 2024; Investigation revealed on Thursday.
- Where
- South Korea
- Why
- To avoid reporting security breaches and to handle the issue internally, which investigators found to be of 'grave concern'.
Government Investigation Team
KT Corp.
Concealment of Infections
Government Investigation Team
Found KT concealed malware infections and failed to report security breaches, regarding the concealment as 'grave concern'.
KT Corp.
Apologized for the delay in reporting the data breach to the government.
Femtocell Management
Government Investigation Team
Revealed serious vulnerabilities in KT's femtocell management system, allowing unauthorized access and disabling encryption.
KT Corp.
Offered free USIM replacements to all customers due to data security concerns.
Legal Measures
Government Investigation Team
Plans to work with authorities to determine proper legal measures and is reviewing if KT's actions breached the law for customer compensation. Referred to law enforcement for obstructing justice.
KT Corp.
Stated they will take the investigation results 'seriously'.
- Company
- KT Corp.
- Incident
- Concealment of malware infections and security failures leading to data theft.
- Malware Detected
- BPFDoor and other malicious code on 43 servers.
- Data Exposed
- Customer names, phone numbers, email addresses, IMEI data, payment authentication data.
- Financial Loss to Customers
- 240 million won ($167,000) from 368 customers.
- Potential Penalty Example
- SK Telecom fined 134.7 billion won for similar breach.