Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts

A state-sponsored campaign has been uncovered by South Korean authorities and security firms, involving the compromise of trusted domestic websites. These hacked sites were used to exploit vulnerabilities in locally installed financial-security software, specifically AnySign4PC. The exploitation allowed attackers to install backdoors, including SIGNBT or COPPERHEDGE, on targeted systems without prompting the user. The infection occurred when a vulnerable version of AnySign4PC was present on the visitor's system.