S. Korea says attackers use IP address in 16 nations

The World

Discussion

The Salem News has a real-name policy for commenting. Users may sign in using the Facebook Connect tool above the comments field. Once your first comment is posted by a moderator, all future comments will post automatically. If you prefer not to use Facebook, send an e-mail with your comments user name (which must be the same as your real name), city or town, street address and daytime phone number to comments@salemnews.com. A staff member will contact you directly to confirm your identity. It may take a day or two before you can post comments. Only your user name will be public. All users are required to follow our rules for commenting, which can be found here.

comments powered by Disqus

July 10, 2009

Anonymous The Salem News Fri Jul 10, 2009, 02:12 AM EDT

SEOUL, South Korea (AP) — Cyber attacks that caused a wave of Web site outages in the U.S. and South Korea used 86 IP addresses in 16 countries, South Korea's spy agency told lawmakers Friday, amid suspicions North Korea was behind the effort.

The countries include South Korea, the United States, Japan and Guatemala, Chung Chin-sup, a member of the parliamentary intelligence committee, told reporters.

He spoke after being briefed by the National Intelligence Service, or NIS, on preliminary investigations of the IP addresses — the Internet equivalent of a street address or phone number.

The assaults on Web sites in the U.S. and South Korea have been described as so-called denial of service attacks in which floods of computers try to connect to a single site at the same time, overwhelming the server.

The NIS also briefed lawmakers on circumstantial and technical reasons for believing that North Korea could be behind the attacks, Chung said without elaborating.

But the spy agency cautioned it was too early to conclude that North Korea was responsible as the investigations were still under way, according to Park Young-sun, another member of the intelligence committee.

"So far, North Korea was not included among the 16 countries' IP addresses," she told reporters.

U.S. authorities also eyed North Korea as the origin of the trouble, though they warned it would be difficult to identify the attackers quickly.

Three U.S. officials said this week while Internet addresses have been traced to North Korea, that does not necessarily mean the attack involved Kim Jong Il's government in Pyongyang. They spoke on condition of anonymity because they were not authorized to speak publicly on the matter.

It follows a turbulent few months in which secretive North Korea has engaged in a series of threats and provocative actions widely condemned by the international community, including a nuclear test and missile launches.

North Korea has not responded to the allegations of its involvement in the Web site outages.

On Thursday, seven South Korean Web sites — one belonging to the government and the others to private entities — were attacked in the third round of cyber assaults, said Ku Kyo-young, an official from the state-run Korea Communications Commission, but most were back up and running quickly.

As previously, it was caused by so-called denial of service attacks, Ku said, adding that attacks were continuing on the seven sites Friday, but they were still accessible.

Some 50 cases of problems regarding computer hard disks or data were reported Friday morning in South Korea, the commission said, without giving details.

Park, the South Korean lawmaker, said Thursday that a senior intelligence official told her the NIS suspects the North because the country earlier warned it won't tolerate what it claimed were South Korean moves to participate in a U.S.-led cyber warfare exercise, according to a statement from the opposition Democratic Party.

South Korean media reported in May that North Korea was running a cyber warfare unit that tries to hack into U.S. and South Korean military networks to gather confidential information and disrupt service.

Japan was also being extra vigilant against possible cyber attacks, although there was no sign it had been targeted, officials said.

Japan has a "cyber clean center," set up in 2006, to protect its government computers from attacks, including a decoy computer to analyze possible viruses, Kazuaki Nakakoshi, an information security official at the Ministry of Internal Affairs and Communications, said Friday.

"No attacks targeting Japan have been confirmed," he said in a telephone interview.

———

Associated Press writers Jae-soon Chang and Wanjin Park in Seoul, Lolita C. Baldor in Washington and Yuri Kageyama in Tokyo contributed to this report.

Text Only | Photo Reprints

The World

Search Results

Discussion

S. Korea says attackers use IP address in 16 nations

Site Map

Reader Access