Analysis of Cyber Intrusions Targeting Major Religious Organizations in South Korea

An attacker breached two major South Korean churches through an ERP web shell, leaked credentials, and IDOR flaws, escalating across databases, SAP, NAS, and cloud assets to steal vast amounts of congregant, financial, and administrative data using infrastructure linked to an earlier U.S. Christian-platform compromise.