Is the Korean Cyber-War Escalating?

This post is also available in: עברית (Hebrew)

South Korea detected a suspected North Korean hacking attempt Thursday to steal military data by using a journalist’s notebook computer, defense ministry officials have said

The military cyber warfare command found that a notebook infected with a malicious code was used in a bid to attack the defense ministry’s computer network, according to a ministry spokesman. Security Week report shows that the notebook belonged to a reporter covering defense. The spokesman added that notebooks used by reporters are connected to the ministry’s Internet network.

There was no loss of data because the cyber command detected the hacking attempt in advance, the spokesman said. After retracing the IP of the malicious code, the command concluded that hackers had used a server in Austria, he said. “We believe the code has been produced by North Korea, or North Korean hackers are behind today’s cyber attack,” the spokesman told AFP.

iHLS – Israel Homeland Security

The tracked server was used on March 20 last year when hackers attacked South Korean financial institutions and broadcasters, he said. At that time South Korea blamed the North’s military for the attack. In recent years, hackers have used malware deployments and virus-carrying emails for cyber attacks on South Korean military institutions, commercial banks, government agencies, TV broadcasters and media websites.

Investigations into past large-scale cyber assaults have concluded that they originated in North Korea. The North is believed to run an elite cyber war unit of 3,000 personnel, but it has denied any involvement and accuses Seoul of fabricating the incidents to fan cross-border tensions.