TerraN_EmpirE
Tyrant King
Update
South Korea Says It Misidentified Source of Cyberattack
By CHOE SANG-HUN
SEOUL, South Korea — The South Korean government said on Friday that it was mistaken when it identified an Internet address in China as the source of synchronized cyberattacks that paralyzed the computer networks of banks and broadcasters.
The Korea Communications Commission, a government agency, said the Internet address actually belonged to a computer at NongHyup, one of the three banks affected by the hacking on Wednesday. It was mistaken earlier, it said, because the address, used only for the bank’s internal network, was identical to a public Internet Protocol address in China.
Such an I.P. address is useful for tracing the location of an Internet-connected computer, though experts say that that computer could be controlled by hackers operating elsewhere.
South Korean investigators have found “indications that the malicious codes were installed from abroad,” the commission said in a news release on Friday. “There are so many similarities in the ways the attacks were executed and the viruses used that we believe that there was probably a single group behind them.”
The coordinated attacks on Wednesday affected 32,000 computers and servers at the country’s two largest broadcasters, one cable channel and three banks. For hours the banks’ A.T.M.'s were shut down and account-holders could not use their debit cards.
The three banks were operating normally on Friday, but many of the broadcasters’ computers remained down.
Many in South Korea suspect that North Korea was behind the shutdowns, partly because it was suspected in earlier attacks against South Korean Web sites.
In addition, the North has recently issued a torrent of vaguely worded threats that it would retaliate against the South for staging joint military exercises with the United States and supporting the United Nations sanctions imposed against the North a nuclear test on Feb. 12.
But South Korea has not officially assigned blame. Government investigators said it would take weeks to complete their analysis. Even after a lengthy investigation, they said, it is still sometimes impossible to identity the hackers.