Seoul: North Korea behind March hacking

North Korea was behind the cyberattack in March that wiped hard drives on more than 30 000 computers at TV stations and disrupted banks in South Korea, a spokesperson for its internet security agency said on Wednesday, ratcheting up the growing tension between the two sides another notch.

The agency said six computers in the North accessed computer servers in the South using more than a thousand access points on the internet, called IP addresses, based overseas. Those were then used to set up the attack.

A spokesperson told the Associated Press that the attack, planned up to eight months earlier, had similarities to past North Korean hacking attempts, which he said were carried out by an espionage agency run by the military there.

That will raise concerns that even a minor conflict between the two nations could be presaged by a cyberattack aimed at critical infrastructure in the South, which is one of the most networked nations in the world – in stark contrast to the North, which is one of the least networked.

Aggressive language
North Korea has been using increasingly aggressive language in public statements: on Tuesday it warned foreigners to leave the South for "safe places", implying a nuclear war was imminent. The two nations have never signed a peace treaty; the three-year-long Korean war ended in a ceasefire, but not a peace treaty. They have remained at war despite the peace that has reigned since July 1953.

The online realm has become the most active frontier in what is so far a phoney war between the two nations. North Korea's Twitter feed was hacked last week, apparently by hackers from the Anonymous collective.

The cyberattack in March was quickly linked to IP addresses in China by authorities in Seoul, who were already suspicious that the North was behind the attacks. Personal computers in broadcasters YTN, MBC and KBS had their hard drives wiped, while cash machines across the country were disabled and about 32 000 computers at two major commercial banks, Shinhan Bank and NongHyup Bank, were affected, according to the South's state-run Korea Internet Security.

Soon after the attack security companies pointed to North Korea as the likely culprit, saying that the tools used for the incursion were outdated by modern hacking standards, and that the targets were not the kind that unaffiliated "hacktivists" would target. – © Guardian News and Media 2013

These are unprecedented times, and the role of media to tell and record the story of South Africa as it develops is more important than ever. But it comes at a cost. Advertisers are cancelling campaigns, and our live events have come to an abrupt halt. Our income has been slashed.

The Mail & Guardian is a proud news publisher with roots stretching back 35 years. We’ve survived thanks to the support of our readers, we will need you to help us get through this.

To help us ensure another 35 future years of fiercely independent journalism, please subscribe.

Charles Arthur
Charles Arthur works from Tranquility Base Hotel & Casino. Journalist, speaker, moderator. The Guardian’s Technology editor 2009-14. Coming May ‘18: Cyber Wars, on hacking. Prev: Digital Wars: Apple v Google v Microsoft Charles Arthur has over 74656 followers on Twitter.

The case against Floyd Shivambu

The flow of money from VBS Bank would seem to suggest that the EFF’s second-in-command was an ultimate beneficiary of proceeds of a crime

Cabinet reshuffle rumours: Unlikely to happen any time soon, but…

Persistent rumours of a cabinet reshuffle may be jumping the gun, but they do reflect the political realignment taking place within the ANC

Nigeria’s anti-corruption boss arrested for corruption

Ibrahim Magu’s arrest by the secret police was a surprise — but also not surprising

Eskom refers employees suspected of contracts graft for criminal investigations

The struggling power utility has updated Parliament on investigations into contracts where more than R4-billion was lost in overpayments

press releases

Loading latest Press Releases…

The best local and international journalism

handpicked and in your inbox every weekday