Chinese IP used but investigators don't believe it was China; five out of six targets still offline
The crippling cyber attacks that have seen thousands of computers belonging to South Korean media and banking companies originated from a Chinese IP address, investigators have found.
However, investigators have said it is unlikely the attack originated in China, and it is more likely that the perpetrators were simply using the IP address to mask their real location.
Suspicion has fallen upon North Korea for the attack, which has threatened retaliation for the sanctions imposed upon it following its test of a nuclear weapon on February 12th. The country has been accused of waging similar attacks in the past.
According to the banks affected, it isn't thought customer accounts were compromised, and that the attach was aimed more at disrupting business than criminal reasons.
Only one of the six targets Shinhan Bank was back up on running at the time of writing. The other five have continued efforts to overcome the issues which have knocked TV channels off the air, and taken out ATMs across the country.
Via: The Guardian