'What I can tell you is the attack against our state.gov website started on July 5. It's still ongoing, but I'm told that it's much reduced right now.'
State Department spokesman Ian Kelly (left) told reporters.
-- PHOTO: AP
SEOUL (South Korea) - NORTH Korea, which has been firing missiles and spewing threats against the United States, has been identified by South Korea's main spy agency as a suspect in the cyber attacks targeting government and other Web sites in the US and South Korea.
Possible that attacks were not very complicated
In early April, Pyongyang fired a long-range rocket it said was a satellite but that landed in the Pacific Ocean after flying over Japan. Later that month it threatened to launch an intercontinental ballistic missile and in May carried out an underground nuclear test, its second since 2006.
Last month, the North threatened a 'thousand-fold' military retaliation against the US and its allies if provoked.
North Korea is not known for its computing prowess, but experts said such attacks would be easy - and cheap - to mount by hiring outside help.
The attacks began paralyzing Web sites in the US over the July 4 US Independence Day holiday weekend and in South Korea on Tuesday and Wednesday. A South Korean computer security company said that another wave of cyber attacks was expected in South Korea later Thursday.
South Korea's National Intelligence Service told members of parliament's intelligence committee on Wednesday that Pyongyang or its sympathizers were believed to be behind the attacks, according to aides to two of the lawmakers. They spoke on condition of anonymity given the classified nature of the information.
The spy agency declined to confirm the information provided by the aides but said in a statement that the sophistication of the attacks suggested they were carried out at a higher level than just rogue or individual hackers.
The attacks were thoroughly prepared and appeared to have been committed by hackers 'at the level of a certain organization or state,' the statement said. It did not mention North Korea by name.
Seoul-based antivirus software developer AhnLab said it has analyzed a virus program that sent floods of Internet traffic to paralyze Web sites in the two countries. It found that sites in South Korea would be targeted in a new wave of attacks from 6pm (0900 GMT) on Thursday, spokeswoman Hwang Mi Kyung said.
Seven Web sites are likely to be targeted, including those of the Ministry of Public Administration and Security, Kookmin Bank and the mass-circulation Chosun Ilbo newspaper, she said.
There does not appear to be any evidence that North Korea has ever made overt cyber threats. South Korean media reported in May that the North was running a cyber warfare unit that tries to hack into US and South Korean military networks to gather confidential information and disrupt service.
The finger-pointing at North Korea comes as the communist nation has engaged in a series of threats and provocative actions widely condemned by the international community. -- AP