Official: 7 SKorean Web sites under renewed attack
SEOUL, South Korea — A state official says seven South Korean Web sites are under renewed cyber attack.
Ku Kyo-young from the state-run Korea Communications Commission said the latest assault began around 6:30 p.m. (0930 GMT, 5:30 a.m. EDT ) Thursday.
He said one of the affected sites belongs to the government, the other six are private. Some are still working normally despite the attacks.
Earlier Thursday, the country’s leading computer security company warned that another wave of cyber attacks was expected later in the day.
South Korea’s spy agency suspects North Korea is behind the series of attacks that have triggered Web site outages in South Korea and the United States.
THIS IS A BREAKING NEWS UPDATE. Check back soon for further information. AP’s earlier story is below.
SEOUL, South Korea (AP) — Seoul was on high alert Thursday for more cyber attacks amid suspicions that North Korea was behind a recent wave of Web site outages in South Korea and the United States. The South warned that computer networks of key infrastructure could be targeted.
The National Intelligence Service said in a statement it was strengthening cyber security measures for government computer networks, citing a possible new wave of attacks that could target national infrastructure operators like energy, telecommunications and media companies.
Earlier Thursday, the country’s leading computer security company also warned another wave of attacks was expected in South Korea later in the day. There was no word on whether U.S. sites would be hit again.
Seoul-based antivirus software developer AhnLab said it has analyzed a virus program that sent a flood of Internet traffic to paralyze Web sites in both South Korea and the United States. It said seven South Korean sites were likely to be targeted on Thursday.
Twelve South Korean sites were initially attacked Tuesday, followed by strikes Wednesday on 10 others, including government offices. The U.S. targets included the White House, Pentagon, Treasury Department and the Nasdaq stock exchange.
Some South Korean sites remained inaccessible or unstable on Thursday, including the National Cyber Security Center, affiliated with the main spy agency. No major disruptions, however, were reported.
The NIS informed members of parliament’s intelligence committee Wednesday that it believes North Korea or pro-Pyongyang forces were behind the cyber attacks, a lawmaker said.
On Thursday, Rep. Park Young-sun, a member of the committee, said a senior intelligence official told her the NIS suspects the North because the country warned it won’t tolerate what it claimed were South Korean moves to participate in a U.S.-led cyber warfare exercise, according to a statement from the opposition Democratic Party.
Park also told a party meeting that the NIS official cited the fact that most of the attacked sites were those of conservative organizations that have pushed the government to take a harder line on North Korea. Among the sites targeted were those of the presidential Blue House and the ruling Grand National Party.
Park said the NIS official told her the spy agency only gave the committee members the information in the form of a progress report, suggesting no conclusions had been made. Park didn’t identify the official.
The spy agency said it could not immediately confirm Park’s remarks.
The agency’s statement Thursday didn’t mention suspected North Korean involvement and only repeated it was closely cooperating with the U.S. and other countries to discover the origin of the attacks. On Wednesday it said the sophistication of the attacks suggested they were carried out at a higher level than rogue or individual hackers.
U.S. authorities also eyed North Korea as the origin of the trouble, though they warned it would be difficult to identify the attackers quickly.
Three U.S. officials said while Internet addresses have been traced to North Korea, that does not necessarily mean the attack involved Kim Jong Il’s government in Pyongyang. They spoke on condition of anonymity because they were not authorized to speak publicly on the matter.
On Thursday, the Dong-a Ilbo newspaper reported that South Korea has detected signs that North Korea or its sympathizers in China or elsewhere committed the cyber attacks.
The paper, citing an unidentified government official, said the assessment was made after an investigation of infected computers’ IP addresses — the Internet equivalent of a street address or phone number.
South Korean media reported in May that North Korea was running a cyber warfare unit that tries to hack into U.S. and South Korean military networks to gather confidential information and disrupt service.
The communist North has recently engaged in a series of threats and provocative actions widely condemned by the international community, including a nuclear test and missile launches.
The cyber outages were caused by so-called denial of service attacks in which floods of computers all try to connect to a single site at the same time, overwhelming the server that handles the traffic, the state-run Korea Information Security Agency said.
Ku Kyo-young from the state-run Korea Communications Commission said about 20,000 computers in South Korea had been infected by Wednesday evening and the number could have increased.
There were no immediate reports of financial damage or leaking of confidential national information, according to the Korea Information Security Agency. The attacks appeared aimed only at paralyzing Web sites.
Associated Press writers Jae-soon Chang and Wanjin Park in Seoul and Lolita C. Baldor in Washington contributed to this report.
Related News
Feds give Homeland Security OK to retain up to 1,000 new cyber security expertsOctober 1st, 2009 Homeland Security to hire cyber expertsWASHINGTON — The Obama administration has given a green light to the Department of Homeland Security to hire up to 1,000 new cyber experts over the next three years, the first major personnel move to fulfill its vow to bolster security of the nation's computer networks. The announcement follows a wave of cyber attacks on federal agencies, including a July assault that knocked government Web sites off the Internet and earlier intrusions into the country's electrical grid.
Homeland Security says it will be 'competitive' in hiring up to 1,000 cyber security expertsOctober 1st, 2009 Homeland Security to hire up to 1K cyber expertsWASHINGTON — The Obama administration has given a green light to the Homeland Security Department to be more competitive and choosey as it hires up to 1,000 new cyber experts over the next three years, the first major personnel move to fulfill its vow to bolster security of the nation's computer networks. The announcement follows a wave of cyber attacks on federal agencies, including a July assault that knocked government Web sites off the Internet and earlier intrusions into the country's electrical grid.
Cyber criminals increasingly target small businesses; Feds beef up private cooperationSeptember 14th, 2009 Cyber criminals targeting small businessesWASHINGTON — Cyber criminals are increasingly targeting small and medium-sized businesses that don't have the resources to keep updating their computer security, according to federal authorities. Many of the attacks are being waged by organized cyber groups that are based abroad, and they are able to steal not only credit card numbers, but personal information — including Social Security numbers — of the card holders, said Michael Merritt, assistant director of the U.S.
Report: Cyber expert shortage may hinder government in protecting Web sites, internal systemsJuly 22nd, 2009 Report: Shortage of cyber experts may hinder govtWASHINGTON — Federal agencies are facing a severe shortage of computer specialists, even as a growing wave of coordinated cyberattacks against the government poses potential national security risks, a private study found. The study describes a fragmented federal cyber force, where no one is in charge of overall planning and government agencies are "on their own and sometimes working at cross purposes or in competition with one another."
The report, scheduled to be released Wednesday, arrives in the wake of a series of cyberattacks this month that shut down some U.S.
SKorean police: Hackers extracted data from virus-contaminated computers in cyberattacksJuly 14th, 2009 SKorean police: Hackers extracted data in attacksSEOUL, South Korea — Hackers extracted lists of files from computers that they contaminated with the virus that triggered cyberattacks last week in the United States and South Korea, police in Seoul said Tuesday. The attacks, in which floods of computers tried to connect to a single Web site at the same time to overwhelm the server, caused outages on prominent government-run sites in both countries.
Is this cyber war? Response possibilities limited _ and nobody's talking about bombsJuly 10th, 2009 Is this cyber war? Possible U.S responses limitedWASHINGTON — A lot of people are saying this is cyber war. But if the Internet attack on U.S.
SKorea on high alert for more cyber attacks amid suspicions of NKorea involvementJuly 9th, 2009 SKorea on high alert for more cyber attacksSEOUL, South Korea — South Korea was on high alert Thursday for more cyber attacks amid suspicions that North Korea was behind a recent wave of Web site outages in the South and in the United States. The South warned that computer networks of key infrastructure could be targeted.
Official says 7 South Korean Web sites hacked in 3rd wave of cyber attacksJuly 9th, 2009 Official says 7 South Korean Web sites attackedSEOUL, South Korea — The third wave of cyber attacks to hit South Korea caused little disruption Thursday, with six of seven Web sites affected quickly back up and running. The attacks were the latest in a series that began July 4 in the United States and targeted high-profile Web sites including the White House and the office of South Korea's president.
South Korea on high alert for more cyber attacks amid suspicions of North Korea involvementJuly 9th, 2009 South Korea on high alert for more cyber attacksSEOUL, South Korea — Seoul was on high alert Thursday for more cyber attacks amid suspicions that North Korea was behind a recent wave of Web site outages in South Korea and the United States. The South warned that computer networks of key infrastructure could be targeted.
Official says 7 SKorean Web sites hacked again after slew of cyber attacks in South, USJuly 9th, 2009 Official says 7 SKorean Web sites attacked againSEOUL, South Korea — South Korean Web sites were attacked again Thursday after a wave of Web site outages in the U.S. and South Korea that several officials suspect North Korea was behind.
Massive cyber attack affects government Web sites in US, SKorea; NKorea suspectedUSJuly 8th, 2009 Government Web sites attacked; NKorea suspectedWASHINGTON — A widespread computer attack that began July 4 knocked out the Web sites of the Treasury Department, the Secret Service and other U.S. agencies, and South Korean government sites also came under assault.
Federal agency Web sites knocked out by massive, resilient cyber attackJuly 8th, 2009 Federal Web sites knocked out by cyber attackWASHINGTON — A widespread and unusually resilient computer attack that began July 4 knocked out the Web sites of several government agencies, including some that are responsible for fighting cyber crime, The Associated Press has learned. The Treasury Department, Secret Service, Federal Trade Commission and Transportation Department Web sites were all down at varying points over the holiday weekend and into this week, according to officials inside and outside the government.
Officials: Major SKorean, US Web sites hit by suspected cyber attackJuly 8th, 2009 Korean, US Web sites hit by suspected cyber attackSEOUL, South Korea — Suspected cyber attacks paralyzed Web sites of major South Korean government agencies, banks and Internet sites in a barrage that appeared linked to similar attacks in the U.S., South Korean officials said Wednesday. The sites of 11 organizations including the presidential Blue House, the Defense Ministry, the National Assembly, Shinhan Bank, Korea Exchange Bank and top Internet portal Naver went down or had access problems since late Tuesday, said Ahn Jeong-eun, a spokeswoman at Korea Information Security Agency.
Officials debate how the US should retaliate against cyber criminalsJune 3rd, 2009 US grapples with how to retaliate in cyber attacksWASHINGTON — In the murky world of computer espionage, the U.S. faces hard choices on how to retaliate when government or privately owned networks come under cyber attack, senior military and intelligence officials said Tuesday.
Sources say Pentagon planning special command to focus on protecting against cyber attacksApril 22nd, 2009 Sources: Pentagon planning new cyber commandWASHINGTON — The Pentagon is planning to create a new military command to focus on cyberspace and protect its computer networks from cyber attacks, U.S. officials said Wednesday.
Loading ...