SKorea says NKorea behind computer crash in March

Apr 10, 2013 by Youkyung Lee
Members of the Korea Internet Security Agency (KISA) are seen investigating cyber attacks at KISA in Seoul, on March 20, 2013. A S.Korean probe into a major cyber attack on its banks and broadcasters last month has determined N.Korea's military intelligence agency was responsible, a report said on Wednesday.

(AP)—North Korea was responsible for a cyberattack that shut down tens of thousands of computers and servers at South Korean broadcasters and banks last month, officials in Seoul said Wednesday, noting that an initial investigation pointed to a military-run spy agency as the culprit.

The accusation comes as tensions run high on the , with North Korea delivering increasingly belligerent rhetoric as it stews over U.N. sanctions and U.S.-South Korean military drills.

Investigators detected similarities between the March cyberattack and past hacking attributed to the North Korean , including the recycling of 30 previously used malware programs—out of a total of 76 used in the attack, said Chun Kil-soo, an official at 's internet security agency.

Investigators believe that six computers in North Korea were used to access South Korean servers using more than 1,000 IP addresses in 40 countries overseas, Chun said. Thirteen of those IP addresses were traced back to North Korea.

He said the attack appeared to have been planned for about eight months.

"We saw evidence that the attack was extremely carefully prepared," Chun said at a news briefing.

The March 20 struck 48,000 computers and servers, hampering banks for two to five days, although Financial Services Commission official Lim Wang-sub said Wednesday that no bank records or personal data were compromised. Staffers at TV broadcasters KBS, MBC and YTN were unable to log on to news systems for several days, although programming continued during that period. No government, military or infrastructure targets were affected.

It was not the first time Seoul has blamed Pyongyang for such online assaults.

South Korea's said North Korea was behind a in 2009 that crippled dozens of websites, including that of the presidential office. Seoul also believes the North was responsible for cyberattacks on servers of Nonghyup bank in 2011 and Joongang Ilbo, a national daily newspaper, in 2012.

North Korea blamed South Korea and the United States for cyberattacks in March that temporarily disabled Internet access and websites in North Korea, where a small number of people can go online.

Though Wednesday's findings were from an interim investigation report, the final conclusions were not likely to change much, said Lim Chae-ho, a professor of network security at the Korea Advanced Institute of Science and Technology.

"Future evidence will strengthen the case rather than reverse it," Lim said. "It is worrisome that the North's cyberattacks are getting increasingly severe."

Experts believe North Korea trains large teams of cyber warriors and that the South and its allies should be prepared against possible attacks on key infrastructure and military systems. If the inter-Korean conflict were to move into cyberspace, South Korea's deeply wired society would have more to lose than 's, which largely remains offline.

Explore further: Facebook tuning mobile search at social network

not rated yet
add to favorites email to friend print save as pdf

Related Stories

SKorea misidentifies China as cyberattack origin

Mar 22, 2013

(AP)—In an embarrassing twist to a coordinated cyberattack on six major South Korean companies this week, investigators said Friday they wrongly identified a Chinese Internet Protocol address as the source.

Recommended for you

Startups offer banking for smartphone users

15 hours ago

The latest banks are small enough to fit in the palm of your hand. Startups, such as Moven and Simple, offer banking that's designed specifically for smartphones, enabling users to track their spending on the go. Some things ...

'SwaziLeaks' looks to shake up jet-setting monarchy

Aug 29, 2014

As WikiLeaks founder Julian Assange prepares to end a two-year forced stay at Ecuador's London embassy, he may take comfort in knowing he inspired resistance to secrecy in places as far away as Swaziland.

Ecuador heralds digital currency plans (Update)

Aug 29, 2014

Ecuador is planning to create what it calls the world's first digital currency issued by a central bank, which some analysts believe could be a first step toward abandoning the country's existing currency, ...

WEF unveils 'crowdsourcing' push on how to run the Web

Aug 28, 2014

The World Economic Forum unveiled a project on Thursday aimed at connecting governments, businesses, academia, technicians and civil society worldwide to brainstorm the best ways to govern the Internet.

User comments : 0