US officials eye North Korea in cyber attack

US officials eye North Korea in cyber attack

U.S. authorities on Wednesday eyed North Korea as the origin of the widespread cyber attack that overwhelmed government Web sites in the United States and South Korea, although they warned it would be difficult to definitively identify the attackers quickly.

The powerful attack that targeted dozens of government and private sites underscored how unevenly prepared the U.S. government is to block such multipronged assaults.

While Treasury Department and Federal Trade Commission Web sites were shut down by the software attack, which lasted for days over the holiday weekend, others such as the Pentagon and the White House were able to fend it off with little disruption.

The North Korea link, described by three officials, more firmly connected the U.S. attacks to another wave of cyber assaults that hit government agencies Tuesday in South Korea. The officials said that while Internet addresses have been traced to North Korea, that does not necessarily mean the attack involved the Pyongyang government.

The officials spoke on condition of anonymity because they were not authorized to speak publicly on the matter.

South Korea intelligence officials have identified North Korea as a suspect in those attacks and said that the sophistication of the assault suggested it was carried out at a higher level that just rogue or individual hackers.

U.S. officials would not go that far and declined to discuss publicly who may have instigated the intrusion or how it was done.

In an Associated Press interview, Philip Reitinger, deputy under secretary at the Homeland Security Department, said the far-reaching attacks demonstrate the importance of cybersecurity as a critical national security issue.

The fact that a series of computers were involved in an attack, Reitinger said, "doesn't say anything about the ultimate source of the attack."

"What it says is that those computers were as much a target of the attack as the eventual Web sites that are targets," said Reitinger, who heads DHS cybersecurity operations. "They're just zombies that are being used by some unseen third party to launch attacks against government and nongovernment Web sites."

Targets of the most widespread cyber offensive of recent years also included the National Security Agency, Homeland Security Department and State Department, the Nasdaq stock market and The Washington Post, according to an early analysis of the software used in the attacks.

The Associated Press obtained the target list from security experts analyzing the attacks. They provided the list on condition of anonymity because they were not authorized to discuss the investigation.

Other experts in cyber assaults said the incident shined a harsh light on the U.S. government's efforts to protect all of its agencies against Web-based attacks.

James Lewis, a senior fellow at the Center for Strategic and International Studies, said that the fact that both the White House and Defense Department were attacked but didn't go down points to the need for coordinated government network defenses.

"It says that they were ready and the other guys weren't ready," he said. "We are disorganized. In the event of an attack, some places aren't going to be able to defend themselves."

The wave of cyber assaults are known as "denial of service" attacks. Such attacks against Web sites are not uncommon and are caused when sites are so deluged with Internet traffic that they are effectively taken off-line. Mounting such an attack can be relatively easy and inexpensive, using widely available hacking programs, and they become far more serious if hackers infect and tie thousands of computers together into "botnets."

Joe Stewart, director of malware research for the counterthreat unit of SecureWorks Inc., said there's no indication yet of a claim of responsibility hidden anywhere in the program behind the attacks. Stewart and other researchers are analyzing the code for clues about the attacker's identity.

Stewart noted that the attacks on U.S. government sites appeared to expand after the initial assaults over the holiday weekend failed to generate any publicity. He said the "target list" contained in the program's code only had five U.S. government sites on it on July 5, but were broadened the next day to include nongovernment sites inside the U.S.

The following day, the South Korean Web sites were added.

"It seems to me they thought the first round wasn't successful ... they felt they weren't getting enough attention because nobody was talking about their attacks," Stewart said.

The cyber assault on the White House site had "absolutely no effect on the White House's day-to-day operations," said spokesman Nick Shapiro. He said that preventive measures kept whitehouse.gov stable and available to the general public but that Internet visitors from Asia may have experienced problems.

All federal Web sites were back up and running, Shapiro said. A State Department spokesman said the agency's site was up but still experiencing problems. A Web site for the U.S. Secret Service had experienced access problems but did not crash, the agency's spokesman said.

The cyber attack did not appear, at least at the outset, to target internal or classified files or systems, but instead aimed at agencies' public sites, creating a nuisance both for officials and the Web consumers who use them.

Ben Rushlo, director of Internet technologies at Keynote Systems, said problems with the Transportation Department site began Saturday and continued until Monday, while the FTC site was down Sunday and Monday.

Keynote Systems is a mobile and Web site monitoring company based in San Mateo, Calif. The company publishes data detailing outages on Web sites, including 40 government sites it watches.

According to Rushlo, the Transportation Web site was "100 percent down" for two days, so that no Internet users could get through. The FTC site, meanwhile, started to come back online late Sunday, but even on Tuesday Internet users still were unable to get to the site 70 percent of the time.

Dale Meyerrose, former chief information officer for the U.S. intelligence community, said that at least one of the federal agency Web sites got saturated with as many as 1 million hits per second per attack - amounting to 4 billion Internet hits at once. He would not identify the agency, but he said the Web site is generally capable of handling a level of about 25,000 users.

Meyerrose, who is now vice president at Harris Corp., said the characteristics of the attack suggest the involvement of between 30,000 to 60,000 computers.

The widespread attack was "loud and clumsy," which suggests it was carried out by an unsophisticated organization, said Amit Yoran, chief executive at NetWitness Corp. and the former U.S. government cybersecurity chief. "This is not the elegance we would expect from sophisticated adversaries."

Officials agreed, however, that the incident brings to the forefront a key 21st century threat.

"It tells you that cyber attacks are real. It's a very serious problem and one of the more serious facing us, along with terrorism, and China and Russia are the main threats," said Rep. Dutch Ruppersburger, D-Md., who was briefed on the incident.

Import of Uzbek products into Azerbaijan increases
Import of Uzbek products into Azerbaijan increases
Uzbekistan Airport announces tender for water pumps repair
Uzbekistan Airport announces tender for water pumps repair
Uzbekistan increases textile products manufacturing
Uzbekistan increases textile products manufacturing
Loading Bars
Latest
Operational meeting was held under leadership of President, Commander-in-Chief Ilham Aliyev at Central Command Post of Ministry of Defense (PHOTO)
Ethnic Russian soldier dies in battle to liberate Azerbaijani lands from Armenian occupation
Commanders of Armenian armed forces hold meetings at kindergarden (PHOTO)
Azerbaijani army destroying Armenian armed forces on ground and in air - Anar Eyvazov
Azerbaijani army neutralizes high-ranking Armenian soldier
Armenian armed forces forced to retreat, suffering losses (VIDEO)
Footage from Azerbaijani Jabrayil and Zangilan regions liberated from occupation unveiled (VIDEO)
Armenian terrorist killed in Nagorno-Karabakh
Iran’s NICICO enhances its sales value
Weapon emplacements of Armenian Armed Forces destroyed, says Defense Ministry of Azerbaijan (VIDEO)
Tesla recalls 48,442 vehicles in China
Azerbaijani NGOs apply to relevant int'l structures regarding Armenia's involvement of children in military operations
Islamabad condemns killing of Azerbaijani civilians by Armenian Armed Forces (PHOTO/VIDEO)
Armenia admits loss of 11 more servicemen
Israeli cabinet approves Bahrain normalization accord
Iran boosts pickup manufacturing
Azerbaijan confirms 228 more COVID-19 recoveries
Liberation of Azerbaijani lands from occupation - gratifying – Iranian General
Canadian Azerbaijanis protest against Armenian attacks on Ganja (PHOTOS)
US too knows Armenia is terrorist state, MP
Military uniform price in Armenia increase
Russia’s coronavirus case tally exceeds 1.5 mln
Azerbaijani army destroying military equipment, in background of which Pashinyan took selfie (PHOTO)
554 streets disinfected in Baku (PHOTOS)
Footage about Armenia's missile attack on Ganja prepared (VIDEO)
Funeral service for 13-year-old Arthur, who died due to Armenian terror, being held in church in Ganja (PHOTOS)
Iran assigns lands to develop Pardis Technology Park
Will Iran export water?
Iran to increase in detergents and sanitizers price
Iran reveals its COVID-19 data for October 25
US Azerbaijanis hold protest in San Francisco against Armenian terror (PHOTOS)
Azerbaijani army heroically fighting for liberation of native lands from Armenian occupation (VIDEO)
Names of foreign mercenaries fighting in Karabakh within Armenian army revealed
Armenia must be held accountable for using children in battles, Azerbaijani expert
Azerbaijan announces recent statistics on COVID-19 cases across country
Armenian doctor who issued fake COVID-19 certificates to evade conscription arrested
Iran’s CBI announces volume of funds allocated for imports of essential products
Assistant to Azerbaijani president gives interview to leading Egyptian newspaper Al Ahram
Footage from Azerbaijani Gubadli region liberated from occupation unveiled (VIDEO)
Armenian military attacks against Azerbaijan along bordering regions - acts of aggression as enshrined in UN Charter, says Azerbaijani top official
Armenian Armed Forces shelling Azerbaijani Aghdam, Tartar and Agjabedi regions - MoD
Azerbaijani president's aide comments on French delegation's visit to Armenia
Volume of loans attracted for purchase of agricultural machinery in Iran revealed
Azerbaijan Army uses precision weapons against Armenian Armed Forces (VIDEO)
Iranian gov't to impose strict limitations to fight COVID-19
Production of home appliances in Iran increases
Export of agricultural products from Iran's Kurdistan region increases
Georgia reports 1 928 new coronavirus cases, 604 recoveries
President Ilham Aliyev gave interview to US Fox News TV channel (PHOTO)
Iran strongly condemns disrespect for Prophet of Islam in France
Iran unveils amount of loans issued to services sector
Bahar Azadi gold coin price falling in Iran
Statement made following investigation of Armenia's shelling of civilians in Azerbaijan
Azerbaijan close to military victory in Nagorno-Karabakh conflict - Russian analyst
Armenia's hopes that Russia to help it fight against Azerbaijan doomed to fail - expert
New refrigeration unit commissioned in Georgia
U.S. Vice President Pence's chief of staff tests positive for COVID-19
Azerbaijan forces Armenian troops to retreat in Gubadli direction - MoD
Significant amount of Armenian Armed Forces’ manpower, equipment destroyed - MoD
Azerbaijani troops advance new positions in Khojavend, Gubadli, Lachin directions of front
Over 150 new COVID-19 cases reported in Kazakhstan
Volume of loans issued to trade sector in Iran disclosed
WHO reports record increase in confirmed COVID-19 cases of over 465,000 in 24 hours
Samsung chief Lee dies
5.4-magnitude quake hits 74 km off Kawalu, Indonesia
Turkey reports 2,091 COVID-19 patients
Yemen's Houthis targeted two airports and a base in Saudi Arabia
Brazil reports another 432 COVID-19 deaths
Moscow's death toll from confirmed COVID-19 cases rises by 68
Afghan forces kill senior al Qaeda leader al-Masri who was on FBI most wanted list
UK records another 23,012 coronavirus cases with 174 deaths
Helpless on battlefield Armenia spreads false, provocative information - Azerbaijani MoD
Hikmet Hajiyev: Using children under 15 as soldiers is a war crime
8 killed, 4 injured in road accident in Pakistan's Punjab province
Necessary conditions will be created to extradite Armenian prisoners of war and civilians to third countries - MoD
Armenian army's combat equipment destroyed (VIDEO)
Azerbaijan's Defense Ministry calls on civilians in occupied territories to stay away from military facilities
Ministry of Defense: Armenian Armed Forces resort to provocations to prevent operations of Azerbaijani army
Iran declares amount of loans issued to housing & construction sector
Armenia continues to use underage children in military hostilities (VIDEO)
Photo of another missile launched by Armenia against Azerbaijan unveiled (PHOTO)
President Ilham Aliyev on political objectives of Armenian military attack on Azerbaijan
In center of Baku, there is Armenian church, but mosques on occupied territories were destroyed - President Aliyev
With Georgia our relations are excellent, says Azerbaijani president
Armenian government should not try to frighten its population with Turkey - President Aliyev
And after war with Armenia stops, political settlement enforced, role of Turkey will be very important, very positive - President Aliyev
Wounds of war must be healed by political wisdom, by political will - President Aliyev
Armenian government should understand that they are not now in position to dictate - President Aliyev
Best way for future of Karabakh - to live in peace in harmony, try to become good neighbors again, says President Aliyev
Unlike Armenia, from Russia we buy weapons, we pay for them, says Azerbaijani president
Turkey is not involved in the conflict at all - Azerbaijani president
If Armenia didn’t violate ceasefire today clashes would have stopped - President Aliyev
We cleaned completely the Azerbaijani-Iranian border from Armenian occupants, and there will be no more inconvenience for our brothers across river of Araz in Iran - President Aliyev
If Armenia do not stop, we will go until end to liberate all occupied territories - Azerbaijani president
Azerbaijan became already regional hub for not only for energy, but also for transportation - President Aliyev
Armenia - occupier, obliged to liberate territories of Azerbaijan - Lebanese political scientist
Loans of dead servicemen and persons affected by hostilities to be repaid in Azerbaijan
Recep Tayyip Erdogan: Azerbaijan begins to return its lands
Azerbaijani army liberates occupied lands with great inspiration (VIDEO)
Religious confessions of Azerbaijan demonstrate solidarity in fight against Armenian terror (VIDEO)
All news