Screenshot images of the websites of the Ministry of National Defense, left, and the Joint Chiefs of Staff (JCS) show that the sites were targeted by a distributed denial-of-service (DDoS) attack. Capture images of defense ministry and JCS websites
A large-scale distributed denial-of-service (DDoS) attack targeted the official websites of South Korea's Ministry of National Defense (MND) and the Joint Chiefs of Staff (JCS), rendering the sites inaccessible for several hours early Wednesday. The military is investigating the source of the attack, with speculation suggesting potential involvement by North Korea or Russia.
According to the MND, the hacking attack began around 5:30 p.m. the previous day, causing the two official military websites to become inaccessible or experience unstable connections for a period of time. A DDoS attack is a hacking technique that generates excessive traffic over a short period, disrupting normal data transmission and causing the system to crash.
“The cyber attacks originated from external sources, and the military immediately activated its DDoS defense system. The military blocked the IP addresses involved in the attacks and is working to identify the sources,” an official at the MND said, adding that no damage resulted from the attacks.
The website of the Ministry of Environment was also attacked and briefly froze Wednesday morning but has since been restored. The National Information Resources Service said that, while the frequency of attacks has decreased, they are still ongoing, and the government remains vigilant in defending its official websites.
gettyimagesbank
There is widespread speculation that the DDoS attacks may have been carried out by hacking groups from North Korea or Russia. However, an official at the presidential office said on Wednesday that there is not enough information to determine the source, stressing that it is premature to attribute the attacks to North Korea.
"It's difficult to conclude that all cyberattacks are from North Korea, especially given the increasingly complex international situation these days, with the war in Ukraine and instability in the Middle East," the official at the South Korean presidential office explained.
Despite the presidential office's cautious stance, some suggest that North Korea may be behind the cyber provocations, citing its recent pattern of actions targeting South Korea, including the latest launches of an intercontinental ballistic missile (ICBM) and short-range ballistic missiles.
Russia is also under scrutiny, with some speculating that it may be involved in these cyber attacks against Seoul.
Earlier this month, the Korea Internet & Security Agency (KISA) recommended strengthening security measures in light of increasing cyber threats following North Korea's troop deployment to support Russia. The agency specifically urged domestic organizations and companies to enhance security and prepare for potential DDoS attacks from Russian hacking groups.
"Domestic organizations and companies are required to strengthen security measures, amid rising cyber threats from the Russia-Ukraine war, which now involves North Korean troops, as well as from potential DDoS attacks by international hacking groups. Recommended actions include enhanced monitoring of websites and critical systems, regular offline backups of key files, cautioning employees against opening malicious email attachments or links, and applying the latest security updates to all software," KISA warned in a statement released on Friday.
Actually, DDoS attacks have been frequently employed in Russia's war on Ukraine.
In December of last year, Russian hackers targeted the Ukrainian government and private institutions, including the country's payment services, with DDoS attacks. In retaliation, Ukraine claimed early this month that its intelligence unit had launched DDoS attacks on Russian banks, disrupting their online banking services.
Russia's Foreign Minister Sergei Lavrov, North Korea's Foreign Minister Choe Son-hui, second from left, and Oleg Belozyorov, general director and chairman of the Management Board at RZD Russian Railways, attend a ceremony to unveil a plaque in memory of Kim Il-sung, former president of North Korea, at Yaroslavsky Railway Station in Russia, Friday. Tass-Yonhap
Meanwhile, Ukrainian President Volodymyr Zelenskyy confirmed in his video address on Tuesday (local time) that Ukrainian troops had engaged in their first combat encounter with North Korean soldiers in the Kursk region of western Russia.
An official at the South Korean presidential office said Wednesday that it is closely watching the situation.
"What is clear is that a full-scale battle between Ukraine and North Korean forces integrated into the Russian military has not yet begun. While we have not confirmed any incidents involving small-scale reconnaissance or other pre-war preparations, we are currently monitoring whether actual combat will commence," the official said.
Discussions of a Ukrainian special envoy to South Korea is also underway. Once the country confirms its envoy and the agenda, Kyiv and Seoul are expected to officially coordinate the schedule.