SKorea on high alert for more cyber attacks
SEOUL, South Korea — South Korea was on high alert Thursday for more cyber attacks amid suspicions that North Korea was behind a recent wave of Web site outages in the South and in the United States. The South warned that computer networks of key infrastructure could be targeted.
The National Intelligence Service said in a statement that it was strengthening cyber security measures for government computer networks, citing a possible new wave of attacks which could target national infrastructure operators like energy, telecommunications and media companies.
Earlier Thursday, the country’s leading computer security company also warned that another wave of attacks was expected in South Korea later in the day.
Seoul-based antivirus software developer AhnLab said it has analyzed a virus program that sent a flood of Internet traffic to paralyze Web sites in both South Korea and the United States. It said seven South Korean sites were likely to be targeted on Thursday, including those of the Ministry of Public Administration and Security, Kookmin Bank and the mass-circulation Chosun Ilbo newspaper.
South Korean intelligence officials believe North Korea or pro-Pyongyang forces were behind the cyber attacks in the U.S. over the July 4 U.S. Independence Day holiday weekend and in South Korea since Tuesday.
Some South Korean sites remained inaccessible or unstable on Thursday, including the National Cyber Security Center, affiliated with the main spy agency.
The National Intelligence Service informed members of parliament’s intelligence committee of its assessment on Wednesday, according to aides to two of the lawmakers. They spoke on condition of anonymity given the classified nature of the information.
The spy agency declined to confirm the information provided by the aides but said in a statement that the sophistication of the attacks suggested they were carried out at a higher level than rogue or individual hackers.
The agency’s new statement Thursday didn’t mention suspected North Korean involvement and only repeated it was closely cooperating with the U.S. and other countries to discover the origin of the attacks.
U.S. authorities also eyed North Korea as the origin of the trouble, though they warned it would be difficult to identify the attackers quickly.
Three U.S. officials said that while Internet addresses have been traced to North Korea, that does not necessarily mean the attack involved Kim Jong Il’s government in Pyongyang. They spoke on condition of anonymity because they were not authorized to speak publicly on the matter.
On Thursday, the Dong-a Ilbo newspaper reported that South Korea has detected signs that North Korea or its sympathizers in China or elsewhere committed the cyber attacks.
The paper, citing an unidentified government official, said the assessment was made after an investigation on infected computers’ IP addresses — the Internet equivalent of a street address or phone number.
South Korean media reported in May that North Korea was running a cyber warfare unit that tries to hack into U.S. and South Korean military networks to gather confidential information and disrupt service.
The communist North has recently engaged in a series of threats and provocative actions widely condemned by the international community including a nuclear test and missile launches, including firing seven ballistic missiles on July 4 in violation of U.N. Security Council resolutions.
The cyber outages were caused by so-called denial of service attacks in which floods of computers all try to connect to a single site at the same time, overwhelming the server that handles the traffic, the state-run Korea Information Security Agency said.
In South Korea, 12 sites were initially attacked Tuesday, followed by attacks Wednesday on 10 others, including those of government offices like the presidential Blue House and the Defense Ministry, banks, vaccine firms and Web portals. The U.S. targets included the White House, Pentagon, Treasury Department and the New York Stock Exchange.
South Korea issued a cyber security alert Wednesday, establishing an ad hoc office to monitor and obstruct cyber attacks on state agencies around the clock. The Ministry of Public Administration and Security said in a statement that personal computers of all civic servants are required to undergo an emergency inspection.
The state-run Korea Communications Commission said Thursday it was considering raising the alert level again to “orange,” the second highest of four levels of alertness, if more cyber attacks occur and cause serious problems.
The “orange” level requires the government to mobilize more personnel and equipment to cope with cyber attacks, said agency official Ku Kyo-young. The current level is “yellow.”
Ku said about 20,000 computers in South Korea had been infected by Wednesday evening and the number could have increased.
There were no immediate reports of financial damage or leaking of confidential national information, according to the Korea Information Security Agency. The attacks appeared aimed only at paralyzing Web sites.
Associated Press writers Jae-soon Chang and Wanjin Park in Seoul and Lolita C. Baldor in Washington contributed to this report.
Related News
8-state Cyber Security Education Consortium awarded $2.7 million grant to train cyber warriorsOctober 14th, 2009 8-state Cyber Consortium gets $2.7 million grantOKLAHOMA CITY — The National Science Foundation has awarded a $2.7 million grant to an eight-state consortium of technology centers and community colleges that is working to block cyber attacks and stop the loss of high-tech jobs in the U.S., officials said Wednesday. The three-year grant to the Cyber Security Education Consortium will help train a new generation of cyber warriors whose job it will be to prevent potentially crippling Internet-based attacks and stop the drain of knowledge and jobs to nations such as China and India, where 2 million technological workers have U.S.-related jobs, the officials said.
Feds give Homeland Security OK to retain up to 1,000 new cyber security expertsOctober 1st, 2009 Homeland Security to hire cyber expertsWASHINGTON — The Obama administration has given a green light to the Department of Homeland Security to hire up to 1,000 new cyber experts over the next three years, the first major personnel move to fulfill its vow to bolster security of the nation's computer networks. The announcement follows a wave of cyber attacks on federal agencies, including a July assault that knocked government Web sites off the Internet and earlier intrusions into the country's electrical grid.
Homeland Security says it will be 'competitive' in hiring up to 1,000 cyber security expertsOctober 1st, 2009 Homeland Security to hire up to 1K cyber expertsWASHINGTON — The Obama administration has given a green light to the Homeland Security Department to be more competitive and choosey as it hires up to 1,000 new cyber experts over the next three years, the first major personnel move to fulfill its vow to bolster security of the nation's computer networks. The announcement follows a wave of cyber attacks on federal agencies, including a July assault that knocked government Web sites off the Internet and earlier intrusions into the country's electrical grid.
Cyber criminals increasingly target small businesses; Feds beef up private cooperationSeptember 14th, 2009 Cyber criminals targeting small businessesWASHINGTON — Cyber criminals are increasingly targeting small and medium-sized businesses that don't have the resources to keep updating their computer security, according to federal authorities. Many of the attacks are being waged by organized cyber groups that are based abroad, and they are able to steal not only credit card numbers, but personal information — including Social Security numbers — of the card holders, said Michael Merritt, assistant director of the U.S.
NKorea puts military on "special alert" because of joint SKorean-US military drillsAugust 17th, 2009 NKorea puts military on 'special alert'SEOUL, South Korea — North Korea says its military will be on "special alert" because of South Korea's joint military drills with the U.S. The communist nation's army made the announcement Monday on the same day that the country said it was restarting key reconciliation projects with South Korea, to reunite separated families and organize joint tourism.
SKorean police: Hackers extracted data from virus-contaminated computers in cyberattacksJuly 14th, 2009 SKorean police: Hackers extracted data in attacksSEOUL, South Korea — Hackers extracted lists of files from computers that they contaminated with the virus that triggered cyberattacks last week in the United States and South Korea, police in Seoul said Tuesday. The attacks, in which floods of computers tried to connect to a single Web site at the same time to overwhelm the server, caused outages on prominent government-run sites in both countries.
Is this cyber war? Response possibilities limited _ and nobody's talking about bombsJuly 10th, 2009 Is this cyber war? Possible U.S responses limitedWASHINGTON — A lot of people are saying this is cyber war. But if the Internet attack on U.S.
Seoul says attackers who downed Web sites in US, SKorea used IP addresses in Europe, US, SouthJuly 10th, 2009 SKorea says attackers used IP address in 5 nationsSEOUL, South Korea — South Korea is learning more about the mysterious cyber attacks that targeted the country and its ally the United States, but the ultimate question of who the instigators are remained elusive. The state-run Korea Communications Commission said Friday that it had identified and blocked five Internet Protocol, or IP, addresses in five countries used to distribute computer viruses that caused the wave of Web site outages in the two countries that began in the U.S.
Official says 7 SKorean Web sites facing renewed cyber attacksJuly 9th, 2009 Official: 7 SKorean Web sites under renewed attackSEOUL, South Korea — A state official says seven South Korean Web sites are under renewed cyber attack. Ku Kyo-young from the state-run Korea Communications Commission said the latest assault began around 6:30 p.m.
South Korea on high alert for more cyber attacks amid suspicions of North Korea involvementJuly 9th, 2009 South Korea on high alert for more cyber attacksSEOUL, South Korea — Seoul was on high alert Thursday for more cyber attacks amid suspicions that North Korea was behind a recent wave of Web site outages in South Korea and the United States. The South warned that computer networks of key infrastructure could be targeted.
Massive cyber attack affects government Web sites in US, SKorea; NKorea suspectedUSJuly 8th, 2009 Government Web sites attacked; NKorea suspectedWASHINGTON — A widespread computer attack that began July 4 knocked out the Web sites of the Treasury Department, the Secret Service and other U.S. agencies, and South Korean government sites also came under assault.
Officials debate how the US should retaliate against cyber criminalsJune 3rd, 2009 US grapples with how to retaliate in cyber attacksWASHINGTON — In the murky world of computer espionage, the U.S. faces hard choices on how to retaliate when government or privately owned networks come under cyber attack, senior military and intelligence officials said Tuesday.
Obama launches cyberspace security planMay 30th, 2009 WASHINGTON - US President Barack Obama Friday declared the country's digital infrastructure a "strategic national asset" whose protection needs to be overseen from within the White House. Referring to a series of brazen crimes ranging from attacks on thousands of US military computers to the theft of an estimated $1 trillion in intellectual property, Obama announced the creation of a new position for a cyber-security czar who would
coordinate a disparate government bureaucracy.
Obama's Day: Obama to address cyber security, attend FEMA hurricane preparedness meetingMay 29th, 2009 Cyber security, FEMA meeting on Obama's agendaWASHINGTON — President Barack Obama is to address a 21st century defense threat — protecting the nation against a cyber attack. Obama is scheduled to deliver remarks Friday morning on how the government plans to better secure the nation's computer infrastructure.
Sources say Pentagon planning special command to focus on protecting against cyber attacksApril 22nd, 2009 Sources: Pentagon planning new cyber commandWASHINGTON — The Pentagon is planning to create a new military command to focus on cyberspace and protect its computer networks from cyber attacks, U.S. officials said Wednesday.