News / Asia

South Korea: Cyber Attack Originated in China

Members of media are reflected on the door of Cyber Terror Response Center as they wait to enter the lab at National Police Agency in Seoul, South Korea, March 21, 2013.
Members of media are reflected on the door of Cyber Terror Response Center as they wait to enter the lab at National Police Agency in Seoul, South Korea, March 21, 2013.
VOA News
South Korean officials say a cyber attack that shut down computers at several of the country's top banks and broadcasters originated in China.

The Korea Communications Commission on Thursday said an initial investigation revealed that a Chinese IP address created the malicious code in a server of one of the affected banks, Nonghyup Bank.

But the commission stressed that this does not confirm who was behind the attack, saying it could have been launched in another country and made to appear to come from China.

South Korean Defense Ministry spokesperson Kim Min-seok suggested the culprit is North Korea, which in the past is believed to re-route cyberattacks on Seoul through Chinese addresses.

"When [the hacker] turns out to be North Korea, both the South Korean government and the South Korean military will respond. However, it is not confirmed at the moment," said Kim.

South Korea's Yonhap news agency also quoted an unidentified high-ranking official in the presidential office as saying that Seoul bears a "strong suspicion" that North Korea conducted the attack.

The attack Wednesday paralyzed computers at television broadcasters YTN, MBC, and KBS, as well as two commercial banks, Shinhan Bank and Nonghyup Bank.

The Korea Internet Security Agency says it would take at least five days to fully restore the functions of the at least 32,000 computers that were affected by the attack.

South Korea's military raised its alert level following the attack, though the military was not targeted.

Jason Healey of the Atlantic Council says such attacks tend to happen when tensions between the two Koreas are high, as has been the case in recent weeks.

"A few of us had been warning as early as last week that this was … that this kind of attack on South Korea would be likely since the North Koreans have been quite belligerent lately and even renounced the armistice with South Korea and the United States," he said. "The North Koreans are always wanting to be about bad behavior and intensification of their tantrums, so it’s entirely possible that this was North Korea.”  

Another Washington-based cyber analyst, Jessica Herrera-Flanigan of the Monument Policy Group, says North Korean involvement in the attack would not be surprising.

She also said South Koreans who are sympathetic to the North's government could have carried it out.

"Broadcasters are an easy target because they carry news, they carry information, and we’ve seen those types of cyber attacks increasingly occurring," she said. "Banks, it’s a disruption of the economic system, and it’s a statement about the economic system and trying to attack those systems.”

North Korea has used increasingly violent rhetoric against the U.S.-backed South in recent weeks, threatening to wage all-out war after the United Nations passed sanctions in response to the North's latest nuclear test.

Pyongyang is believed to have an elite cyber warfare unit that was reportedly behind computer attacks on South Korean government agencies and financial institutions in 2009 and 2011.  South Korea's military said it was not affected by the outage.

Wednesday's attack came just days after North Korea accused the United States and South Korea of launching a computer attack on some of its websites, which suffered a prolonged outage last week.

You May Like

Video Video Claims to Show Shi'ite Forces in Iraq Executing Sunni Boy

While not yet independently confirmed, brutal killing already has gotten attention of Islamic State followers on social media More

After Six Years, Little Change for Niger Delta's Former Militants

Nigerians who laid down arms in exchange for government amnesty subsidies fear program may end with upcoming presidential elections More

Vietnam Pushes for More Educated Drivers to Curb Road Deaths

Transportation officials hope that making a greater effort to get drivers to learn the rules of the road will reduce fatal crashes More

Featured Videos

Your JavaScript is turned off or you have an old version of Adobe's Flash Player. Get the latest Flash player.
Video Claims to Show Shia Forces in Iraq Executing Sunni Boyi
X
Jeff Seldin
March 05, 2015 2:36 AM
A graphic mobile phone video is spreading on the Internet, claiming to show Iraqi forces or Shia militia executing a handcuffed Sunni boy. Experts have yet to verify the video, but already Islamic State followers are publicizing it across social media, playing on deep-rooted sectarian fears. VOA’s Jeff Seldin reports.
Video

Video Video Claims to Show Shia Forces in Iraq Executing Sunni Boy

A graphic mobile phone video is spreading on the Internet, claiming to show Iraqi forces or Shia militia executing a handcuffed Sunni boy. Experts have yet to verify the video, but already Islamic State followers are publicizing it across social media, playing on deep-rooted sectarian fears. VOA’s Jeff Seldin reports.
Video

Video Ukrainian Authorities Struggle to Secure a Divided Mariupol

Since last month's cease-fire went into effect, shelling around the port city of Mariupol has decreased, but it is thought pro-Russian separatists remain poised to attack. For the city’s authorities, a major challenge is gaining the trust of residents, while at the same time rooting out informants who are passing sensitive information to the rebels. Patrick Wells reports for VOA.
Video

Video Volunteer Gauge-Watchers Help Fine-Tune Weather Science

An observation system called CoCoRaHS is working to improve weather science, thanks to thousands of volunteers across the country who measure precipitation in their own backyards, then share their data through the Internet. VOA's Shelley Schlender reports.
Video

Video NASA Spacecraft Approaches a Dwarf Planet

NASA’s Dawn spacecraft will make history on Friday, March 6, when it becomes the first man-made object to orbit a dwarf planet named Ceres. It is located in the asteroid belt between Mars and Jupiter, almost 500 million kilometers from Earth. Among other objectives, Dawn will try to examine two mysterious bright white spots detected on the planet’s surface. VOA’s George Putic has more.
Video

Video Young Muslims Radicalized Online

Young Muslims are being radicalized ‘in their bedrooms’ through direct contact with Islamic State or ISIL fighters via the Internet, according to terror experts. There are growing concerns that authorities and Internet providers are not doing enough to counter online extremism - which analysts say is spread by a prolific network of online supporters around the world. Henry Ridgwell reports from London.
Video

Video African Americans Recall 1960's Fight For Voting Rights

U.S. President Barack Obama and thousands of people will gather in the small southern U.S. city of Selma, Alabama, Saturday, March 7th to commemorate the 50th anniversary of a historic voting rights march that became known as “Bloody Sunday." VOA’s Chris Simkins traveled to Alabama and introduces us to some of the foot soldiers of the voting rights struggles of the 1960’s.
Video

Video Positive Messaging Transforms Ethiopia's Image

Ethiopia was once known for famine and droughts. Now, headlines more often point to its fast-growing economy and its emergence as a regional peacemaker. How has Addis Ababa changed the narrative? VOA's Marthe van der Wolf reports.
Video

Video Cyber War Rages Between Iran, US

A newly published report indicates Iran and the United States have increased their cyber attacks on each other, even as their top diplomats are working toward an agreement to guarantee Iran does not develop a nuclear weapon and to free Iran from international sanctions. The development is part of a growing global trend. VOA’s Al Pessin reports from London.
Video

Video Answers Elude Families of MH370 Passengers

For the families on board Malaysia Airlines flight MH370, an airline official’s statement nearly one year ago that the plane had lost contact with air traffic control at 2:40 AM is the only thing that remains confirmed. William Ide reports.

All About America

Circumventing Censorship

An Internet Primer for Healthy Web Habits

As surveillance and censoring technologies advance, so, too, do new tools for your computer or mobile device that help protect your privacy and break through Internet censorship.
More