Nonghyup Attack Traced to IP Address in S.Korea
The malware that paralyzed the internal computer network at agricultural lender Nonghyup during a massive cyber attack on banks and broadcasters here last Wednesday has been traced to one of its own IP addresses, not a Chinese IP address as originally believed.
But that does not necessarily mean the attack was launched by a South Korean hacker because the Nonghyup IP address is believed to be that of an intermediate router rather than the original source of the cyber-attack.
A combined civilian, government and military team of investigators still believe North Korean hackers were behind the attack via a third country. In a press briefing last Friday, the Korean Communications Commission said careful analysis of the Chinese IP address that was originally believed to have been used in the cyber attack showed that the IP address belongs to a Nonghyup employee, not a Chinese entity.
