Hackers Exploit AnySign4PC via Compromised Korean Sites to Install Backdoors

A state-sponsored campaign compromised trusted South Korean websites to exploit a vulnerability in AnySign4PC, a financial security tool. Visitors to infected pages had SIGNBT or COPPERHEDGE backdoors installed without any prompt. The attack targeted systems running vulnerable versions of the software, leveraging the trusted sites for silent infection.