Security Experts:

Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cyberwarfare

South Korea Detects Suspected North Korea Hacking Attempt

SEOUL – South Korea detected a suspected North Korean hacking attempt Thursday to steal military data by using a journalist’s notebook computer, defense ministry officials said.

The military cyber warfare command found that a notebook infected with a malicious code was used in a bid to attack the defense ministry’s computer network, a ministry spokesman said.

SEOUL – South Korea detected a suspected North Korean hacking attempt Thursday to steal military data by using a journalist’s notebook computer, defense ministry officials said.

The military cyber warfare command found that a notebook infected with a malicious code was used in a bid to attack the defense ministry’s computer network, a ministry spokesman said.

South Korea

The notebook belonged to a reporter covering defense, he said, adding notebooks used by reporters are connected to the ministry’s Internet network.

There was no loss of data because the cyber command detected the hacking attempt in advance, the spokesman said.

After retracing the IP of the malicious code, the command concluded that hackers had used a server in Austria, he said.

“We believe the code has been produced by North Korea, or North Korean hackers are behind today’s cyber attack,” the spokesman told AFP.

The tracked server was used on March 20 last year when hackers attacked South Korean financial institutions and broadcasters, he said. At that time South Korea blamed the North’s military for the attack.

In recent years, hackers have used malware deployments and virus-carrying emails for cyber attacks on South Korean military institutions, commercial banks, government agencies, TV broadcasters and media websites.

Investigations into past large-scale cyber assaults have concluded that they originated in North Korea.

The North is believed to run an elite cyber war unit of 3,000 personnel, but it has denied any involvement and accuses Seoul of fabricating the incidents to fan cross-border tensions.

RelatedSouth Korea’s ‘Top Gun’ Cyber Warriors

 

RelatedNew Disk Wiping Malware Used in Attacks Against South Korea

Written By

AFP 2023

Click to comment

Expert Insights

Related Content

Nation-State

The North Korean APT tracked as TA444 is either moonlighting from its previous primary purpose, expanding its attack repertoire, or is being impersonated by...

Cyberwarfare

Websites of German airports, administration bodies and banks were hit by DDoS attacks attributed to Russian hacker group Killnet

Nation-State

FBI says a North Korea-linked threat group known as Lazarus and APT38 is behind the $100 million Horizon bridge cryptocurrency heist.

Cybercrime

Artificial intelligence is competing in another endeavor once limited to humans — creating propaganda and disinformation.

Cyberwarfare

The UK’s NCSC has issued a security advisory to warn about spearphishing campaigns conducted by two unrelated Russian and Iranian hacker groups.

Cyberwarfare

Iranian APT Moses Staff is leaking data stolen from Saudi Arabia government ministries under the recently created Abraham's Ax persona

Nation-State

A China-linked hackers are exploiting a vulnerability (CVE-2022-42475 ) in Fortinet FortiOS SSL-VPN, Mandiant claims.

Cyberwarfare

WASHINGTON - Cyberattacks are the most serious threat facing the United States, even more so than terrorism, according to American defense experts. Almost half...