Open main menu

On 20 March 2013, three South Korean television stations and a bank suffered from frozen computer terminals in a suspected act of cyberwarfare.[1] ATMs and mobile payments were also affected. The South Korean communications watchdog raised their alert level on cyber-attacks to three on a scale of five. North Korea has been blamed for similar attacks in 2009 and 2011 and was suspected of launching this attack as well. South Korean officials linked the incident to a Chinese IP address, which increased suspicion of North Korea as "[i]ntelligence experts believe that North Korea routinely uses Chinese computer addresses to hide its cyber-attacks." [2]

Malware related to the attack is called "DarkSeoul" in the computer world and was first identified in 2012. The Financial Services Commission of South Korea said that Shinhan Bank reported that its Internet banking servers had been temporarily blocked and that Jeju Bank [ko] and NongHyup reported that operations at some of their branches had been paralyzed after computers were infected with viruses and their files erased. Woori Bank reported a hacking attack, but said it had suffered no damage. Computer shutdowns also hit companies including the Korean Broadcasting System, Munhwa Broadcasting Corporation, and YTN.[3]

The South Korean government asserted a Pyongyang link in the March cyberattacks, which has been denied by Pyongyang.[4] A 50-year-old South Korean man identified as Mr. Kim is suspected to be involved in the attack.[5]

See alsoEdit


  1. ^ Tania Branigan, "South Korea on alert for cyber-attacks after major network goes down: Computer systems of banks and broadcasters are interrupted, with fingers immediately pointed at North Korea", The Guardian, 20 March 2013.
  2. ^ "China IP address link to South Korea cyber-attack". BBC. 21 March 2013. Retrieved September 12, 2016.
  3. ^ Choe Sang-Hun, "Computer Networks in South Korea Are Paralyzed in Cyberattacks", The New York Times, 20 March 2013.
  4. ^ Lee Minji (April 10, 2013). "(2nd LD) Gov't confirms Pyongyang link in March cyber attacks". Yonhap News. Retrieved September 7, 2016.
  5. ^ Jeyup S. Kwaak (July 31, 2013). "Seoul Suspects South Korean Tech Executive of Helping North in Cyberattacks". The Wall Street Journal. Retrieved August 3, 2013.