KT Corp. Concealed Malware Breach, Enabling Payment Fraud via Compromised Femtocells South Korean authorities uncovered a months-long cybersecurity failure at KT Corp., the country’s second-largest mobile carrier, after the company concealed malware infections and data breaches tied to a sophisticated attack. According to findings from a joint government-private investigation, KT detected BPFDoor malware compromising 43 of its servers between March and July 2024, exposing customer data but chose to handle the incident internally rather than report it to regulators. The breach was exacerbated by critical vulnerabilities in KT’s femtocell management system, which allowed attackers to deploy malicious micro base stations connected to the carrier’s internal network. These rogue femtocells disabled end-to-end encryption, enabling threat actors to intercept payment authentication details and facilitate fraudulent micropayments. Investigators confirmed that the flaws stemmed from inadequate security controls, leaving KT potentially liable for regulatory penalties. In response, KT acknowledged the lapses, stating it would fully cooperate with the investigation and strengthen its network defenses. The carrier has pledged to prioritize customer protection amid the fallout, though the full scope of the financial and data exposure remains under review. The incident highlights systemic risks in mobile infrastructure security, particularly around third-party-connected devices.