Tech Beetle briefing SOUTH KOREA AI

Military targeted in nearly 19,000 cyberattack attempts in 2025: lawmaker

Essential brief

In 2025, the South Korean military experienced nearly 19,000 cyberattack attempts, the highest number recorded in five years. This marks a significant increase from previous years, with a notable r

Key topics

military targeted nearly cyberattack attempts lawmaker South Korean Cyber Operations Command North Korea Cyberattack

Key facts

South Korean military faced nearly 19,000 cyberattack attempts in 2025, the highest in five years.

Most attacks targeted military websites by attempting to gain administrator privileges.

Tracing the origins of attacks is challenging due to attackers hiding their tracks.

North Korea is believed to have advanced its cyber warfare capabilities, linked to its intelligence agency.

Highlights

18,951 cyberattack attempts recorded against South Korean military in 2025.

Significant increase from 11,700 attempts in 2021 and 14,419 in 2024.

18,792 attempts involved trying to compromise military websites via administrator privileges.

Cyber Operations Command noted difficulties in identifying attackers' sources.

North Korea's General Reconnaissance and Intelligence Bureau is suspected of conducting these cyber operations.

Why it matters

The rise in cyberattack attempts against South Korea's military highlights escalating cyber threats in the region, particularly from North Korea. Understanding and addressing these threats is crucial for national security and maintaining the integrity of military operations. Enhanced cybersecurity measures and intelligence efforts are essential to counter increasingly sophisticated cyber warfare tactics.

Cyberattack attempts targeting the South Korean military surged to 18,951 in 2025, representing the highest figure in five years. This number shows a sharp increase compared to 11,700 attempts in 2021, 9,115 in 2022, 13,599 in 2023, and 14,419 in 2024. The data was disclosed by Rep. Yu Yong-weon of the main opposition People Power Party, citing information from the defense ministry.

Among the 2025 incidents, 18,792 were attempts to compromise military websites by trying to gain administrator privileges. These attacks pose significant risks to the integrity and security of military digital infrastructure.

The Cyber Operations Command reported difficulties in pinpointing the exact sources of these cyberattacks, as malicious actors often conceal their origins. However, intelligence assessments indicate that North Korea has recently enhanced its cyber warfare capabilities.

South Korean authorities attribute many of these cyber operations to North Korea's intelligence agency, the General Reconnaissance and Intelligence Bureau. This agency has reportedly expanded its functions and missions, as noted during a meeting of North Korea's Central Military Commission.

The increasing frequency and sophistication of cyberattacks underscore the growing cyber threats faced by national defense systems in the region. Efforts to strengthen cybersecurity measures and improve attribution capabilities remain critical for South Korea's military resilience.

Key topics in this update include military targeted, nearly, and cyberattack attempts.