As the SK Telecom USIM information leakage incident spreads, it has been revealed that a software distribution certificate of CJ OliveNetworks, an IT subsidiary of the CJ Group, was hacked and used to distribute malicious code.
According to the industry on the 7th, it was confirmed that a digital signature in the name of CJ OliveNetworks was included in one of the recently disclosed malicious files. The digital signature is a means of certifying that the software is legitimate, allowing the malicious code to be trusted and executed by users.
A CJ OliveNetworks official noted, "The problematic certificate is for software distribution and is not related to personal information," adding, "The certificate was revoked immediately after confirming the hacking, so it is currently invalid."
Some raise the possibility that the hacking could be linked to the North Korean hacker group 'Kim Sooky'.
CJ OliveNetworks manages the IT infrastructure of major affiliates such as CJ Logistics and CJ ENM, providing B2B solutions, including smart factory and logistics automation systems, targeting manufacturing and logistics corporations.