South Korea Conducts Maritime Cyber Drill with 5 Shipping Firms Simulating Supply Chain Attacks

The Korea Internet & Security Agency (KISA) announced that it held a joint maritime cybersecurity incident response drill on November 3 at BEXCO in Busan, partnering with five shipping and vessel management firms alongside the Korea Coast Guard and industry associations. The drill simulated an attack scenario where adversaries sent malicious phishing emails impersonating port authorities and altered vessel software update packages via compromised vendor devices, leading to infected onboard communication servers and disrupted ship-to-shore communications. According to KISA, increasing satellite connectivity and remote vessel support have heightened exposure to phishing and supply chain risks, especially when multiple shipping companies share common software platforms. The exercise was divided into four stages: suspicious email identification and threat intelligence sharing, malware remediation and system recovery, mitigating supply chain intrusion leveraging AI attack tools, and coordinated investigation and analysis by authorities. KISA plans to compile identified gaps to help operators improve operational incident response protocols.

Key takeaways

• KISA and 5 maritime shipping companies conducted a joint cybersecurity drill testing responses to supply chain attacks.
• The drill simulated phishing attacks impersonating port authorities and corrupted software updates that severed ship-to-shore communications.
• The 4-stage exercise encompassed email threat identification, infection remediation, system recovery, addressing AI-driven supply chain attacks, and joint official investigations.