Reported by 2 outlets
Hackers Breach South Korean Churches via ERP Web Shell and IDOR
Why this score
- Breadth
- 1.00 / 2.0 · 2 sources
- Authority
- 1.20 / 2.0 · best outlet weight
- Severity
- 0.50 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.54 / 0.6 · time to second source
- Recency
- × 0.01 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Analysis
Attackers breached two major South Korean churches (Yoido Full Gospel Church, Sarang Church) through ERP web shells, privileged database access, leaked credentials, and broken authorization controls. The incidents mix suspected AI-assisted techniques with classic IDOR and web-shell intrusion. Recovered attacker artifacts show collection of congregant, employee, financial, and administrative data. No CVEs cited; the breaches demonstrate compound vulnerability in church IT infrastructure rather than a single product flaw.
Timeline
-
original reporting
Hackers Use ERP Web Shell and IDOR Flaws to Breach Major South Korean Churches
gbhackers.com · 6d ago · October 7th, 2026
Attackers breached two of South Korea’s largest churches through distinct intrusion chains, combining an ERP web shell, privileged database access, leaked credentials, and broken authorization controls. Oasis Security’s analysis of attacker-server files documents extensive collection of congregant, employee, financial, and administrative information across both organizations. Its findings describe recovered attacker artifacts, rather than a complete […] The post Hackers Use ERP Web Shell and IDOR Flaws to Breach Major South Korean Churches appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .
-
update from beyondmachines.net
South Korean Megachurches Investigate Suspected AI-Assisted Cyberattacks Yoido Full Gospel Church and Sarang Church are investigating cybera
beyondmachines.net · 6d ago · October 7th, 2026
South Korean Megachurches Investigate Suspected AI-Assisted Cyberattacks Yoido Full Gospel Church and Sarang Church are investigating cybera
via Mastodon https://beyondmachines.net/event_details/south-korean-megachurches-investigate-suspected-ai-assisted-cyberattacks-m-n-f-7-y/gD2P6Ple2L