Too early to say if North Korea behind global cyber attack, says Europol

A Europol spokesman said it was still too early to say whether North Korea was behind the cyber attacks that hit computers all over the world.
PHOTO: AFP/YONHAP

THE HAGUE (AGENCE FRANCE-PRESSE) - The European police agency said on Tuesday (May 16) it was still too early to say whether North Korea was linked to a massive cyber attack which has caused global computer chaos.

"We are open to investigate in all directions, but we don't speculate and we cannot confirm this. It's still too early to say anything," said senior spokesman for Europol Jan Op Gen Oorth.

"We are working on it. The investigation is ongoing," he said. "It could come from everywhere, it could come from any country."

Security researchers investigating the massive cyber attack campaign on Tuesday reported signs of a possible North Korean link, with one expert warning there could be more to come.

In the first clues of the origin of the massive ransomware attacks, Google researcher Neel Mehta posted computer code that showed similarities between the "WannaCry" malware and a vast hacking effort widely attributed to Pyongyang.

In signs however the attack was slowing, Europol said the number of affected IP addresses around the world was 163,745 - a 38 per cent percent fall from the 226,000 reported on Sunday (May 14).

The attack blocks computers and puts up images on victims' screens demanding payment of US$300 (S$419.33) in the virtual currency Bitcoin, saying: "Ooops, your files have been encrypted!"

Europol, the cross-border policing agency which is based in The Hague, said some 243 payments of a total of about US$63,000 had been made since the attack was launched late on Friday (May 12).

Dutch cyber spy chief Rob Bertholee meanwhile refused to be drawn on the identity of the attackers at a top cyber security conference being held in The Hague.

The Netherlands has already fingered Pyongyang as a possible threat to its national digital systems, he said.

"Every state actor could be an actor in cyber space. But we are specifically worried about a limited number of state actors. In our list of favourite state actors, you can find Russia, you can find China, you can find Iran."

"And I think we might have a very capable adversary in North Korea as well," he added.

Join ST's Telegram channel and get the latest breaking news delivered to you.