Cyber Chaos: Qilin's South Korea Heist, Coupang's Customer Nightmare, and U.S. Backtracks on China Threat

This is your Digital Dragon Watch: Weekly China Cyber Alert podcast. Hey listeners, Ting here with your Digital Dragon Watch weekly roundup. Let's dive straight into the cyber chaos that's been unfolding across the Pacific. The big story dominating this week is what cybersecurity experts are calling one of the most audacious supply chain attacks we've seen. South Korea's financial sector got absolutely hammered by the Qilin ransomware group, who appears to have gotten a serious upgrade in their crew. Bitdefender is reporting that this operation combined Qilin's ransomware capabilities with what they're calling potential involvement from North Korean state-affiliated actors known as Moonstone Sleet. These guys breached a single managed service provider and used that foothold to compromise at least twenty-eight financial institutions. Over a million files and two terabytes of data got exfiltrated across three different leak waves. That's not just an attack, that's a masterclass in leverage. Now here's where it gets spicy for South Korea specifically. Investigators just uncovered something that's shaking the entire e-commerce sector. Coupang, South Korea's biggest e-commerce platform, disclosed that a former Chinese employee who handled authentication tasks apparently weaponized their access keys to steal personal data from thirty-three point seven million customer accounts. The breach started way back in June but didn't get discovered until November when someone noticed unauthorized access to just forty-five hundred accounts. Once the forensics team started digging, they found the five-month nightmare. The suspect allegedly maintained active authentication credentials even after leaving the company, which is a security disaster that Coupang's clearly going to be hearing about for years. What's wild is that payment information stayed protected, but names, emails, phone numbers, addresses, and order histories are all out there. Meanwhile, the U.S. government is having its own reckoning with Chinese cyber operations. The Federal Communications Commission just did something controversial at their November meeting. They rescinded a January 2025 cybersecurity ruling that imposed stronger requirements on telecommunications carriers. Senator Maria Cantwell's basically calling them out, saying they're reversing course after heavy lobbying from the exact carriers that got breached by Chinese hackers during the Salt Typhoon operation. The irony is definitely not lost on Capitol Hill. For protection recommendations, experts are hammering home that organizations need to treat third-party access like it's basically radioactive. Inventory every authentication credential your former employees had. Rotate keys immediately upon termination. And if you're in critical infrastructure, assume the Chinese are already inside looking around. The Treasury Department's already sanctioning companies involved in these operations, so the U.S. government is taking this seri This content was created in partnership and with the help of Artificial Intelligence AI.