Monday, July 20, 2009

Whatever Happened to Those Korean Hackers?

Psyops campaign served its purpose, then is gone.

"the attacks were presumed to have been either a practice run or of a preliminary nature"

See:
Slow Saturday Special: World Can't Confirm Alleged Korean Computer Attacks

Whatever happened to that Korean ship we were ghosting, anyway, 'murka?

"Hackers extracted files during cyber attack; Indicates goal was to steal data" by Jae-Soon Chang, Associated Press | July 15, 2009

SEOUL - Hackers extracted files from computers they contaminated with the virus that triggered cyber attacks last week in the United States and South Korea, police said yesterday, a sign that they tried to steal information.

The attacks, in which floods of computers tried to connect to a single website at the same time to overwhelm the server, caused outages on prominent government-run sites in both countries.

The finding adds to concern that contaminated computers were ordered to damage their own hard disks or files after the Web assaults. Still, the new finding does not mean information was stolen from attacked sites....

It also does not address suspicions about North Korea's involvement, they said. Investigators have yet to identify the hackers or determine where they operated from....

Blogs have.

South Korea’s spy agency, the National Intelligence Service, said the agency’s National Cyber Security Center told ruling party lawmakers yesterday that the attacks were presumed to have been either a practice run or of a preliminary nature, Yonhap news agency said.

Calls to the ruling party spokesman were not answered. The National Cyber Security Center declined to comment. North Korea is suspected of involvement. The spy agency told lawmakers last week that a North Korean military research institute had been ordered to destroy the South’s communications networks, local media reported. The agency said in a statement Saturday that it has “various evidence’’ of North Korean involvement, but cautioned it has yet to reach a final conclusion.

I'm tired of the bullshit!

Seoul’s state-run Korea Communications Commission said yesterday that it has blocked an IP address apparently used to distribute last week’s virus, but it is likely the hackers used the address to disguise themselves or mask their location.

Yeah, well, they can run but they can't hide -- from the blogs!

--more--"