Skip to main content

South Korea says hacking not from Chinese address

By K.J. Kwon and Jethro Mullen, CNN
updated 7:24 AM EDT, Fri March 22, 2013
Members of the Korea Internet Security Agency (KISA) check on cyber attacks at a briefing room of KISA in Seoul on March 20, 2013.
Members of the Korea Internet Security Agency (KISA) check on cyber attacks at a briefing room of KISA in Seoul on March 20, 2013.
STORY HIGHLIGHTS
  • Wednesday's suspected cyberattack hit 32,000 computers
  • Nine companies fell victim to the malicious code
  • Government computers weren't affected
  • South Korea has blamed the North in the past, which has rejected the allegations

Seoul, South Korea (CNN) -- The suspected cyberattack that struck South Korean banks and media companies this week didn't originate from a Chinese IP address, South Korean officials said Friday, contradicting their previous claim.

The Korea Communications Commission, a South Korean regulator, said that after "detailed analysis," the IP address that was thought to be from China was determined to be an internal IP address from one of the banks that was infected by the malicious code.

It said, though, that "the government has confirmed that the attack was from a foreign land."

An IP address is the number that identifies a network or device on the Internet.

Read: Why cyber attacks threaten our freedom

Widespread damage

Experiencing a potential cyberattack
Internet outage hits South Korea
Cybersecurity concerns for China, U.S.

The attack Wednesday damaged 32,000 computers and servers at media and financial companies, South Korea's Communications Commission said.

It infected banks' and broadcasters' computer networks with a malicious program, or malware, that slowed or shut down systems, officials and the semiofficial Yonhap News Agency said.

The military stepped up its cyberdefense efforts in response to the widespread outages, which hit nine companies, Yonhap reported, citing the National Police Agency.

Government computer networks did not seem to be affected, Yonhap cited the National Computing and Information Agency as saying. A joint team from government, the military and private industry was responding.

How the hackers got in and spread the malicious code remains under investigation, and analysts are examining the malware, a South Korean official close to the investigation said.

Read: International cyber attacks on the rise

Blaming North Korea in the past

South Korea has accused the North of similar hacking attacks before, including incidents in 2010 and 2012 that also targeted banks and media organizations. The North rejected the allegations.

The outages come amid heightened tensions on the Korean Peninsula, with the North angrily responding to a recent U.N. Security Council vote to impose tougher sanctions on Pyongyang after the country's latest nuclear test last month.

Last week, North Korea invalidated its 60-year-old armistice with the South. It has threatened to attack its neighbor with nuclear weapons and has also threatened the United States.

The armistice agreement, signed in 1953, ended the three-year war between North and South but left the two nations technically in a state of war.

The United States has deployed B-52 bombers to conduct high-profile flyovers of its South Korean ally and announced that it will deploy new ground-based missile interceptors on its West Coast against the remote possibility that North Korea could strike the United States with long-range weapons.

ADVERTISEMENT
Part of complete coverage on
updated 2:51 PM EDT, Tue April 15, 2014
Sky gazers caught a glimpse of the "blood moon" crossing the Earth's shadow Tuesday in all its splendor.
updated 12:24 PM EDT, Tue April 15, 2014
Oscar Pistorius didn't consciously pull the trigger the night he shot and killed his girlfriend, the sprinter testified at his murder trial.
updated 5:16 PM EDT, Mon April 14, 2014
Officials are launching their next option: an underwater vehicle to scan the ocean floor.
updated 8:54 AM EDT, Tue April 15, 2014
A mysterious new artwork has appeared in Cheltenham, where Britain's version of the NSA is located.
updated 11:23 AM EDT, Tue April 15, 2014
Like many parents across Liverpool, the McManamans waited. 25 years ago, it was all they could do.
updated 9:24 AM EDT, Tue April 15, 2014
The Maltese Falcon makes a swift turn while at sea.
How do you design a superyacht fit for the billionaire who has everything money can buy?
updated 11:48 AM EDT, Tue April 15, 2014
Pop art condoms in Kenya
Packaging can change how people see things. And when it comes to sex, it could maybe help save lives too.
updated 11:42 AM EDT, Tue April 15, 2014
mediterranean monk seal
Africa is home to much unique wildlife, but many of its iconic species are threatened.
updated 11:09 AM EDT, Tue April 15, 2014
A staff stands next to the propellers of Sun-powered plane Solar Impulse 2 HB-SIB seen in silhouette during its first exit for test on April 14, 2014 in Payerne, a year ahead of their planned round-the-world flight. Solar Impulse 2 is the successor of the original plane of the same name, which last year completed a trip across the United States without using a drop of fuel. AFP PHOTO / FABRICE COFFRINI (Photo credit should read FABRICE COFFRINI/AFP/Getty Images)
This solar-powered aircraft will attempt to circle the globe next year.
updated 7:56 AM EDT, Mon April 14, 2014
Most adults make the mistakes of hitting the snooze button and of checking emails first thing in the morning, writes Mel Robbins.
updated 1:14 PM EDT, Tue April 15, 2014
... not in Italy. In fact, it's thousands of miles away.
updated 8:43 PM EDT, Tue April 15, 2014
Ebola victims usually come from remote areas -- but now the lethal virus is in a city of two million.
updated 9:40 AM EDT, Tue April 15, 2014
Browse through images you don't always see on news reports from CNN teams around the world.
ADVERTISEMENT