Live data from Hacker News

S. Korean Banks Fall Victim to Biggest Cyber Attack in Two Years

businessweek.com

11–20 of 29 posts

Re: S. Korean Banks Fall Victim to Biggest Cyber Attack in Two Years

#11
post #7
post #2

Do North Korea have the expertise to do such attack? It sounds to me more likely that supporters of North Korea did it (say groups inside China).

From the Korea Herald: "According to South Korean experts, Pyongyang’s electronic warfare capabilities are second only to Russia and the United States." Not sure how accurate THAT statement is, but North Korea has waged electronic warfare multiple times in the past including jamming SK's GPS systems at one point. They probably have a fully capable electronics warfare unit. Its also quite possible that China supplies…

> second only to Russia and the United States.

> China supplies the technology/know how to conduct such attacks

You have your bogeymen in wrong order it seems, if China is behind North Korea in it how can they help?

Re: S. Korean Banks Fall Victim to Biggest Cyber Attack in Two Years

#12
post #10

Bit confused.. "A possible cyber attack temporarily shut down computer networks" ... "Operations at the two banks were back to normal later in the afternoon and it was still unclear what caused the disruptions" So it might have been a cyber attack. It might not. "President Park Geun Hye’s administration created a cyber crisis headquarters to investigate whether North Korea is behind the outages" I would have thought…

Because this is exactly the scenario that plays out every time North Korea "attacks" South Korea. No one ever owns it, just like with the submarine http://www.bbc.co.uk/news/10129703. It's an "accident" or it's inconclusive.

Also, neither side wants to conclusively blame the other, because hey, they're still at odds. Stepping a single foot into the DMZ without permission can get you shot at.

SK is probably trying to give them the benefit of the doubt but is relatively sure it was them.

Re: S. Korean Banks Fall Victim to Biggest Cyber Attack in Two Years

#13
Sometime ago there was news "North Korea under cyber attach" or sth like that. Now this.

So, this is an "attack" or "counter-attack"? Anyway, am I the only who who is smelling that that sense of retaliation was routed from some other country as one can actually doubt North Korea's cyber prowess.

South Korean Internet is micro-monitored like many tyrannies(though not on the same scale" so I guess the attack was sophisticated and of some calibre.

Re: S. Korean Banks Fall Victim to Biggest Cyber Attack in Two Years

#14
post #5

Honest, slightly unrelevant question: does North Korea have access to the world wide web? And if so, who do they connect through?

Yeah, but I think it's limited to a select few, as you might expect. They also have their own DNS system IIRC.

Re: S. Korean Banks Fall Victim to Biggest Cyber Attack in Two Years

#15
post #5

Honest, slightly unrelevant question: does North Korea have access to the world wide web? And if so, who do they connect through?

Yeah, but I think it's limited to a select few, as you might expect. They also have their own DNS system IIRC.

It seems unlikely that with such restricted access to technology they would be able to cultivate top-calibre talent for cyber attacks.

Re: S. Korean Banks Fall Victim to Biggest Cyber Attack in Two Years

#16
post #8
post #7

Earlier quoted context omitted.

From the Korea Herald: "According to South Korean experts, Pyongyang’s electronic warfare capabilities are second only to Russia and the United States." Not sure how accurate THAT statement is, but North Korea has waged electronic warfare multiple times in the past including jamming SK's GPS systems at one point. They probably have a fully capable electronics warfare unit. Its also quite possible that China supplies…

"Also, South Korea has REALLY bad security. For example, if you want to use some form of online banking you must use an ActiveX control with IE." I've heard about that, and that it's a major impediment to the adoption of new browsers, but I'm wondering how that gels with the (uncomfortable/awkward?) zeitgeist of Samsung. I was under the impression that Japan went 'mobile first' years ago and their phones have been th…

We need to use IE for most banking/online shopping sites. So the market share of Windows/IE in Korea is higher than other parts of the world.

Most people have Windows/IE installed together with their preferred OS/browser, myself included.

For mobile banking the situation's a little bit better but it is cumbersome nonetheless.

I think the payment system in S. Korea has a lot of potential for disruption, but the current regulatory laws force the businesses to use ActiveX.

Re: S. Korean Banks Fall Victim to Biggest Cyber Attack in Two Years

#17
Expect more of the same from South Korea in the weeks, months, and (unfortunately) years to come. These massive attacks have been happening for many years now, and nobody seems to have learned a thing.

The latest news here in Korea says that bank employees' PCs were infected through a compromised third-party package management system. Only two years ago, 35 million accounts at one of South Korea's most popular social networking services was compromised through a similar route: the attackers broke into the update servers of a popular antivirus software, which was used on employees' PCs. Same story, only with different companies.

And of course, by "PC", I mean machines running Windows XP with the user always logged in as administrator and IE's security setting somewhere between Medium-Low and Low, because how else are you going to browse the ActiveX web? The companies that provide package management systems and antivirus software probably also use similar PCs, which is likely to be one of the reasons why they got compromised in the first place.

Macs are getting popular nowadays among chic teenagers and college kids, but on the other hand, a long-time member of an IT forum that I frequent recently asked whether he should upgrade from IE6 to IE8 on his primary computer. We might make the best Android phones in the world, but the rest of South Korea's IT infrastructure is nothing but a series of facepalms.

And the first thing the leaders do is blame North Korea. Which they have been doing every time something similar happened in the last 4-5 years. I don't know whether it's actually NK or not, but as for improving the system, nope, my brother's university still asks him to disable several of IE9's security measures every time he logs in.

Re: S. Korean Banks Fall Victim to Biggest Cyber Attack in Two Years

#18
post #11
post #7

Earlier quoted context omitted.

From the Korea Herald: "According to South Korean experts, Pyongyang’s electronic warfare capabilities are second only to Russia and the United States." Not sure how accurate THAT statement is, but North Korea has waged electronic warfare multiple times in the past including jamming SK's GPS systems at one point. They probably have a fully capable electronics warfare unit. Its also quite possible that China supplies…

> second only to Russia and the United States. > China supplies the technology/know how to conduct such attacks You have your bogeymen in wrong order it seems, if China is behind North Korea in it how can they help?

Are you suggesting that Russia or the US are supplying North Korea with the know-how? :P

1. He/she was only quoting the Korea Herald.

2. We don't have credentials on these "South Korean experts." I would expect that if they are not part of the military then they might have even less knowledge of what they are talking about.

3. North Korea is a bigger threat to South Korea than China is. That may skew opinions.

Re: S. Korean Banks Fall Victim to Biggest Cyber Attack in Two Years

#19
post #8

Earlier quoted context omitted.

"Also, South Korea has REALLY bad security. For example, if you want to use some form of online banking you must use an ActiveX control with IE." I've heard about that, and that it's a major impediment to the adoption of new browsers, but I'm wondering how that gels with the (uncomfortable/awkward?) zeitgeist of Samsung. I was under the impression that Japan went 'mobile first' years ago and their phones have been th…

We need to use IE for most banking/online shopping sites. So the market share of Windows/IE in Korea is higher than other parts of the world. Most people have Windows/IE installed together with their preferred OS/browser, myself included. For mobile banking the situation's a little bit better but it is cumbersome nonetheless. I think the payment system in S. Korea has a lot of potential for disruption, but the curren…

...the current regulatory laws force the businesses to use ActiveX.

Wow. Here I was thinking CFAA was a bad law.

Re: S. Korean Banks Fall Victim to Biggest Cyber Attack in Two Years

#20
post #15

Earlier quoted context omitted.

Yeah, but I think it's limited to a select few, as you might expect. They also have their own DNS system IIRC.

It seems unlikely that with such restricted access to technology they would be able to cultivate top-calibre talent for cyber attacks.

I agree, though if the top post in this thread is correct, it doesn't look like they really need top talent.
Post reply on HN