Too early to assign blame - cyber experts

AP

A South Korean police officer from Digital Forensic Investigation walks inside the Cyber Terror Response Centre at National Police Agency in Seoul.

Related Stories

• Cyberwar manual lays down rules
• Glimpse inside a cyberspy unit
• Some Chinese cyber attacks ‘state sponsored’

Seoul - A Chinese Internet address was the source of a cyberattack on one of the South Korean companies hit in a massive computer shutdown that affected five other banks or media companies, initial findings indicated on Thursday.

It's too early to assign blame - Internet addresses can easily be manipulated and disguised - but suspicion for Wednesday's shutdown quickly fell on North Korea, which has threatened Seoul with attack in recent days because of anger over UN sanctions imposed for its February 12 nuclear test.

Experts say hackers often attack via computers in other countries to hide their identities. South Korea has previously accused North Korean hackers of using Chinese addresses to attack.

The crash on Wednesday caused computer networks at major banks and top TV broadcasters to crash simultaneously. It paralysed bank machines across the country and raised fears that this heavily Internet-dependent society was vulnerable.

A Chinese address created the malicious code in the server of one of the banks, Nonghyup, where computers crashed, according to an initial analysis by the state-run Korea Communications Commission, South Korea's telecom regulator.

It is expected to take at least four to five days for the infected computers to recover fully.

Regulators have distributed vaccine software to government offices, banks, hospitals and other institutions to prevent more outages. - Sapa-AP

Hungry for more scitech news? Sign up for our daily newsletter