Skip to main content

South Korea says hacking not from Chinese address

By K.J. Kwon and Jethro Mullen, CNN
March 22, 2013 -- Updated 1124 GMT (1924 HKT)
Members of the Korea Internet Security Agency (KISA) check on cyber attacks at a briefing room of KISA in Seoul on March 20, 2013.
Members of the Korea Internet Security Agency (KISA) check on cyber attacks at a briefing room of KISA in Seoul on March 20, 2013.
STORY HIGHLIGHTS
  • Wednesday's suspected cyberattack hit 32,000 computers
  • Nine companies fell victim to the malicious code
  • Government computers weren't affected
  • South Korea has blamed the North in the past, which has rejected the allegations

Seoul, South Korea (CNN) -- The suspected cyberattack that struck South Korean banks and media companies this week didn't originate from a Chinese IP address, South Korean officials said Friday, contradicting their previous claim.

The Korea Communications Commission, a South Korean regulator, said that after "detailed analysis," the IP address that was thought to be from China was determined to be an internal IP address from one of the banks that was infected by the malicious code.

It said, though, that "the government has confirmed that the attack was from a foreign land."

An IP address is the number that identifies a network or device on the Internet.

Read: Why cyber attacks threaten our freedom

Widespread damage

Experiencing a potential cyberattack
Internet outage hits South Korea
Cybersecurity concerns for China, U.S.

The attack Wednesday damaged 32,000 computers and servers at media and financial companies, South Korea's Communications Commission said.

It infected banks' and broadcasters' computer networks with a malicious program, or malware, that slowed or shut down systems, officials and the semiofficial Yonhap News Agency said.

The military stepped up its cyberdefense efforts in response to the widespread outages, which hit nine companies, Yonhap reported, citing the National Police Agency.

Government computer networks did not seem to be affected, Yonhap cited the National Computing and Information Agency as saying. A joint team from government, the military and private industry was responding.

How the hackers got in and spread the malicious code remains under investigation, and analysts are examining the malware, a South Korean official close to the investigation said.

Read: International cyber attacks on the rise

Blaming North Korea in the past

South Korea has accused the North of similar hacking attacks before, including incidents in 2010 and 2012 that also targeted banks and media organizations. The North rejected the allegations.

The outages come amid heightened tensions on the Korean Peninsula, with the North angrily responding to a recent U.N. Security Council vote to impose tougher sanctions on Pyongyang after the country's latest nuclear test last month.

Last week, North Korea invalidated its 60-year-old armistice with the South. It has threatened to attack its neighbor with nuclear weapons and has also threatened the United States.

The armistice agreement, signed in 1953, ended the three-year war between North and South but left the two nations technically in a state of war.

The United States has deployed B-52 bombers to conduct high-profile flyovers of its South Korean ally and announced that it will deploy new ground-based missile interceptors on its West Coast against the remote possibility that North Korea could strike the United States with long-range weapons.

ADVERTISEMENT
Part of complete coverage on
May 16, 2013 -- Updated 1914 GMT (0314 HKT)
Boxing legend Manny Pacquiao is using his hero status to fight human trafficking in the Philippines, pushing for an anti-trafficking law.
May 16, 2013 -- Updated 2225 GMT (0625 HKT)
The U.N. says 70% of rapes committed in Somalia are carried out by men in military uniform. CNN's Nima Elbagir reports.
May 17, 2013 -- Updated 1238 GMT (2038 HKT)
Christiane Amanpour writes an open letter to girls of the world, saying it is time to end the discrimination against girls in education.
May 17, 2013 -- Updated 1912 GMT (0312 HKT)
Fans gasped when David Beckham wore a sarong. Then there was the nail polish and tattoos. But his masculinity was never in doubt.
May 17, 2013 -- Updated 1454 GMT (2254 HKT)
Albinos in Tanzania have been attacked and killed because some people believe their body parts bring good luck. But one albino is fighting back.
May 17, 2013 -- Updated 1250 GMT (2050 HKT)
Terrible results for Dell mean the future seems anything but bright for the PC industry despite a flurry of attempted innovations.
May 17, 2013 -- Updated 1600 GMT (0000 HKT)
Mario Balotelli has delivered his verdict on his time in the English Premier League -- the AC Milan striker couldn't be happier to have left England.
May 17, 2013 -- Updated 1104 GMT (1904 HKT)
If you thought Preakness was the poor sister to Kentucky Derby, think again. CNN brings you top five facts from the prestigious horse race.
May 15, 2013 -- Updated 2345 GMT (0745 HKT)
Natasha Kampusch was held for eight years in an Austrian man's basement. She talks about her road to recovery, exclusively to CNN.
May 15, 2013 -- Updated 2136 GMT (0536 HKT)
From her hospital bed, Reshma tells CNN about the 17 days she spent trapped under nine stories of rubble in Bangladesh.
May 16, 2013 -- Updated 2212 GMT (0612 HKT)
A room full of partygoers in San Francisco were given power over a cocktail-making robot controlled by their smartphones.
May 16, 2013 -- Updated 1557 GMT (2357 HKT)
The cast of "Star Trek Into Darkness" take a break from fighting space villains to answer questions from CNN iReporters.
May 20, 2013 -- Updated 1047 GMT (1847 HKT)
CNN brings you images capturing moments to remember. Look ahead to the future and chronicle our changing world.
ADVERTISEMENT