This article is from the source 'nytimes' and was first published or seen on . It last changed over 40 days ago and won't be checked again for changes.

You can find the current article at its original source at http://www.nytimes.com/2013/03/23/world/asia/south-korea-says-it-misidentified-source-of-cyberattack.html

The article has changed 2 times. There is an RSS feed of changes available.

Version 0 Version 1
South Korea Says It Misidentified Source of Cyberattack South Korea Says It Misidentified Source of Cyberattack
(about 3 hours later)
SEOUL, South Korea — The South Korean government said Friday that it was mistaken when it identified an Internet address in China as the source of synchronized cyberattacks that paralyzed the computer networks of banks and broadcasters in South Korea. SEOUL, South Korea — The South Korean government said on Friday that it was mistaken when it identified an Internet address in China as the source of synchronized cyberattacks that paralyzed the computer networks of banks and broadcasters.
The Korea Communications Commission, a government agency, said the Internet address actually belonged to a computer at NyongHyup, one of the three banks affected by the hacking on Wednesday. It was mistaken earlier, it said, because the address, used only for the bank’s internal network, was identical to a public Internet Protocol address in China. The Korea Communications Commission, a government agency, said the Internet address actually belonged to a computer at NongHyup, one of the three banks affected by the hacking on Wednesday. It was mistaken earlier, it said, because the address, used only for the bank’s internal network, was identical to a public Internet Protocol address in China.
Such an I.P. address is useful for tracing the location of an Internet-connected computer, though experts say that that computer could be controlled by hackers operating elsewhere.Such an I.P. address is useful for tracing the location of an Internet-connected computer, though experts say that that computer could be controlled by hackers operating elsewhere.
South Korean investigators have found ‘'indications that the malicious codes were installed from abroad,'’ the commission said in a news release on Friday. ‘'There are so many similarities in the ways the attacks were executed and the viruses used that we believe that there was probably a single group behind them.'’ South Korean investigators have found “indications that the malicious codes were installed from abroad,” the commission said in a news release on Friday. “There are so many similarities in the ways the attacks were executed and the viruses used that we believe that there was probably a single group behind them.”
The coordinated attacks on Wednesday affected 32,000 computers and servers at the country’s two largest broadcasters, one cable channel and three banks. For hours the banks’ A.T.M.'s were shut down and account-holders could not use their debit cards.The coordinated attacks on Wednesday affected 32,000 computers and servers at the country’s two largest broadcasters, one cable channel and three banks. For hours the banks’ A.T.M.'s were shut down and account-holders could not use their debit cards.
The three banks were operating normally on Friday, but many of the broadcasters’ computers remained down.The three banks were operating normally on Friday, but many of the broadcasters’ computers remained down.
Many in South Korea suspect that North Korea was behind the shutdowns, partly because it was suspected in earlier attacks against South Korean Web sites.Many in South Korea suspect that North Korea was behind the shutdowns, partly because it was suspected in earlier attacks against South Korean Web sites.
In addition, the North has recently issued a torrent of vaguely worded threats that it would retaliate against the South for staging joint military exercises with the United States and supporting the U.N. sanctions imposed against the North for its Feb. 12 nuclear test. In addition, the North has recently issued a torrent of vaguely worded threats that it would retaliate against the South for staging joint military exercises with the United States and supporting the United Nations sanctions imposed against the North a nuclear test on Feb. 12.
But South Korea has not officially assigned blame. Government investigators said it would take weeks to complete their analysis. Even after a lengthy investigation, they said, it is still sometimes impossible to identity the hackers.But South Korea has not officially assigned blame. Government investigators said it would take weeks to complete their analysis. Even after a lengthy investigation, they said, it is still sometimes impossible to identity the hackers.