KorPath
Attack Intelligence
KorPath was compromised in a ransomware attack attributed to everest in November 2025. The organization, operating in an undisclosed sector in South Korea, was added to the group's data leak site as part of an extortion campaign.
everest operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
[AI generated] KorPath is a biotechnology company that specializes in early-stage technologies. Their main focus is on identifying unique compounds and molecules that can be used in various medical interventions. The company conducts extensive research on pathological conditions including cancer and neurodegenerative disorders. They also offer preclinical services such as ex vivo efficacy studies.
Intelligence correlations link this incident to 1 vulnerability(ies) including CVE-2026-3300, which may have been leveraged as initial access vectors or for lateral movement.