4.4 million attacks from North Korean IPs put focus on Pyongyang’s cyber capabilities – Korea JoongAng Daily

4.4 million attacks from North Korean IPs put focus on Pyongyang’s cyber capabilities  Korea JoongAng Daily

More than 4.4 million attempts to probe South Korean financial systems were detected from North Korean IP addresses, raising concerns over Pyongyang South Korean financial authorities issued a notice to the financial sector, which has been beset by breaches this month. More than 4.4 million attempts to access South Korean financial systems from North Korean IP addresses have been detected, throwing Pyongyang’s growing cyberwarfare capabilities into focus. Analysts say Pyongyang uses cyberspace both as a battlefield for intelligence warfare and as a way around international sanctions, mobilizing dedicated hacking groups to raise funds for the regime and steal military and diplomatic intelligence. Financial authorities recently sent financial companies and cryptocurrency exchanges a notice through FIRST, the financial sector’s integrated security monitoring system.

According to the authorities, 4,404,101 attempts to probe financial systems were detected from multiple IP addresses assigned to North Korea from 3 a.m. on Oct. 21 until the notice was sent. It is the first time signs of access from North Korean IPs have been confirmed as a string of financial sector hacking incidents hit the sector this month. Because IP addresses can be spoofed or rerouted, it is difficult to conclude that North Korea was behind the attempts. It has also not been confirmed whether any of them led to an actual breach or data theft. Experts