South Korea

Winsage
April 12, 2025
Microsoft's Recall software, initially unveiled nearly a year ago as part of Copilot+ PCs, aims to simplify the retrieval of past activities by capturing snapshots for natural language searches. The rollout was postponed due to privacy and security concerns but has since begun with a preview version for select Windows Insiders and is expanding to the Release Preview Channel. Users can opt-in to this feature. DroiX will no longer prepay taxes at checkout for U.S. customers due to fluctuating tariffs. MediaTek has launched the Dimensity 9400+, a flagship processor with improved CPU speeds and AI performance. Motorola is set to release its first laptop, the Moto Book 60, in India on April 17. Samsung plans to launch its Ballie rolling robot in the U.S. and South Korea this summer and is partnering with Google to integrate Gemini AI features.
AppWizard
March 27, 2025
Mandarin is the most widely used language on Steam, with 33.7% of users selecting it as their primary language, followed closely by English at 33.5%. Over 66% of Steam users have chosen a primary language other than English. The popularity of games developed by Chinese companies, such as Genshin Impact and Honkai: Star Rail, has contributed to this trend. Chinese game developers often have significantly larger budgets and workforces compared to Japanese developers. Additionally, Mandarin speakers are not only from mainland China but also from Taiwan, Singapore, and Malaysia, with reports of the language being encountered in South Korea and Vietnam in 2023.
Winsage
March 20, 2025
Almost a dozen state-sponsored threat groups from nations including China, Russia, Iran, and North Korea are exploiting a security vulnerability in Microsoft Windows, identified as ZDI-CAN-25373, to conduct espionage and gather sensitive information. This vulnerability affects how Windows handles .lnk files, allowing attackers to execute hidden malicious commands. Since 2017, these groups have targeted government, military, and critical infrastructure organizations globally, with 11 state-sponsored groups identified, primarily focusing on espionage (70%) and financial motives (20%). North Korea accounts for 45.5% of the exploitation, with Iran and Russia at 18.2% each, and China at 18.1%. The United States has experienced the most attacks (343 incidents), followed by Canada (39), Russia (25), and South Korea (23). Despite being notified, Microsoft does not plan to issue a patch for this vulnerability, categorizing it as "low severity."
AppWizard
March 19, 2025
Cybersecurity experts from Bitdefender discovered an ad fraud scheme involving over 300 Android applications that collectively had more than 60 million downloads from the Google Play Store. These apps, which appeared as utility tools like QR scanners and health apps, mainly targeted users with older Android versions (Android 13 and earlier) and first appeared in the third quarter of 2024. As of the research's completion, only 15 of the identified apps were still active, with most affected users located in Brazil, and others in the United States, Mexico, Turkey, and South Korea. The deceptive apps concealed their icons, displayed intrusive ads without user consent, and attempted to harvest sensitive information. Many of these harmful apps have been removed from the Play Store, but users with them installed remain vulnerable. Signs of compromise include lagging, excessive ads, overheating, or unexpected data usage. Users are advised to uninstall suspicious apps and to use the latest version of Android, currently Android 15.
AppWizard
March 12, 2025
Malware, specifically a new spyware variant called KoSpy, has been linked to a North Korean hacking group known as ScarCruft (APT37). Researchers at Lookout Threat Lab discovered KoSpy concealed within deceptive applications like file managers and security software. Once installed, it can extract sensitive information such as SMS messages, call logs, device location, and access files. It can also record audio and video, capture screenshots, and log keystrokes. The data collected is transmitted to Command and Control servers encrypted with a hardcoded AES key and utilizes Firebase Firestore for configuration data. At least one malicious application associated with KoSpy was found on the Google Play Store, downloaded over ten times, and similar apps were also on third-party app store APKPure. Google has since removed the identified applications and deactivated the related Firebase projects.
AppWizard
March 12, 2025
Virtuos is establishing a new development studio in Seoul, South Korea, led by general manager Seunghwan “Sean” Yoon. The studio aims to build partnerships with local clients and expand its team through recruitment. Yoon highlights South Korea's significance in the gaming industry, being the world's fourth-largest games market. The studio's physical presence in Seoul will enhance collaboration with local studios. Virtuos has over 4,000 employees globally and is involved in the remake of Metal Gear Solid 3.
AppWizard
March 12, 2025
A report from cybersecurity firm Lookout reveals that North Korean hackers have uploaded Android spyware, named KoSpy, onto the Google Play app store, which has been downloaded over ten times. The spyware masquerades as a file manager and is designed for surveillance, collecting data such as SMS messages, call logs, device location, files, keystrokes, Wi-Fi details, installed apps, audio recordings, images, and screenshots. Google has removed the identified apps from the Play Store and deactivated associated Firebase projects. Lookout also found instances of KoSpy on the third-party app store APKPure. The campaign appears targeted at individuals in South Korea who speak English or Korean, with links to North Korean hacking groups APT37 and APT43.
Search