Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

Weapons in Cyber Attack on South Korea Killed Targeted PCs
allthingsd.com ^ | March 21, 2013 at 12:52 pm PT | Arik Hesseldahl

Posted on 03/21/2013 1:41:14 PM PDT by Ernest_at_the_Beach

The cyber attack that rocked South Korean TV stations and banks yesterday apparently wiped out the hard drives of the affected computers, according to an analysis of the incident by McAfee.

The involved malware infections destroyed the master boot record of the hard drives of the machines attacked. The MBR on a hard drive contains crucial information on how file systems on the drive are organized. The malware involved overwrote data in the MBR with the following string of characters: “PRINCPES, PR!NCPES, HASTATI.” It also overwrote random parts of the file system with the same characters.

After that the system was given a forced reboot command, but because the MBR and file system had been corrupted, it was unable to restart, McAfee said in a blog post today.

Meanwhile, Renesys, the research company that closely monitors the pulse of the Internet, watched the attacks take place, and noticed what appeared to be a smaller, secondary attack against the network in North Korea. “It is impossible to know from connectivity measurements alone whether these outages were the direct result of cyber attacks,” the firm wrote in a corporate blog post. “However, given the recent rhetoric between these two nations, it is hard not to see these as ominous developments on the Korean peninsula.


TOPICS: Foreign Affairs; News/Current Events; War on Terror
KEYWORDS: cyberwar; korea; malware; northkorea; southkorea

1 posted on 03/21/2013 1:41:14 PM PDT by Ernest_at_the_Beach
[ Post Reply | Private Reply | View Replies]

To: Ernest_at_the_Beach

It sounds like the writer of this article is a little overwrought. If all the malware did was overwrite the MBR and some random sectors, the damage was minimal. It is a fairly easy task to restore the MBR, and recovering any corrupted data should not be a problem if the computer is being backed up regularly.


2 posted on 03/21/2013 1:48:31 PM PDT by CA Conservative (Texan by birth, Californian by circumstance)
[ Post Reply | Private Reply | To 1 | View Replies]

To: CA Conservative

Its a significant escalation between the countries. US media isn’t really talking about the tension over there. The govt and media in SK are getting quite nervous.


3 posted on 03/21/2013 1:51:46 PM PDT by driftdiver (I could eat it raw, but why do that when I have a fire.)
[ Post Reply | Private Reply | To 2 | View Replies]

To: CA Conservative
How many computers are backed up with rigor.

Details from McAfee,,,FR thread:

South Korean Banks, Media Companies Targeted by Destructive Malware

4 posted on 03/21/2013 1:59:52 PM PDT by Ernest_at_the_Beach ((The Global Warming Hoax was a Criminal Act....where is Al Gore?))
[ Post Reply | Private Reply | To 2 | View Replies]

To: Ernest_at_the_Beach

What else is a cyber attack going to target? Pencil sharpeners?


5 posted on 03/21/2013 2:01:07 PM PDT by Tijeras_Slim
[ Post Reply | Private Reply | To 1 | View Replies]

To: Tijeras_Slim; driftdiver; CA Conservative
Chinese internet address involved in S. Korea cyberattack
6 posted on 03/21/2013 2:21:52 PM PDT by Ernest_at_the_Beach ((The Global Warming Hoax was a Criminal Act....where is Al Gore?))
[ Post Reply | Private Reply | To 5 | View Replies]

To: Ernest_at_the_Beach

Hastati (singular: Hastatus) were a class of infantry in the armies of the early Roman Republic who originally fought as spearmen, and later as swordsmen. They were originally some of the poorest men in the legion, and could afford only modest equipment—light armour and a large shield, in their service as the lighter infantry of the legion. Later, the hastati contained the younger men rather than just the poorer, though most men of their age were relatively poor. Their usual position was the first battle line. They fought in a quincunx formation, supported by light troops. They were eventually done away with after the Marian reforms of 107 BC


7 posted on 03/21/2013 2:33:19 PM PDT by Uncle Miltie (Due Process 2013: "Burn the M*****-F***er Down!")
[ Post Reply | Private Reply | To 1 | View Replies]

To: Uncle Miltie

Principes (Singular: Princeps) were spearmen, and later swordsmen, in the armies of the early Roman Republic. They were men in the prime of their lives who were fairly wealthy, and could afford decent equipment. They were the heavier infantry of the legion who carried large shields and wore good quality armour.[1]

Their usual position was the second battle line. They fought in quincunx formation, supported by light troops. They were eventually done away with after the Marian reforms of 107 BC.


8 posted on 03/21/2013 2:33:46 PM PDT by Uncle Miltie (Due Process 2013: "Burn the M*****-F***er Down!")
[ Post Reply | Private Reply | To 7 | View Replies]

To: Uncle Miltie
Curious,...wonder why that was inserted into the code....some kind of warning perhaps?

And the North Koreans have studied Roman history?

9 posted on 03/21/2013 2:50:07 PM PDT by Ernest_at_the_Beach ((The Global Warming Hoax was a Criminal Act....where is Al Gore?))
[ Post Reply | Private Reply | To 8 | View Replies]

To: CA Conservative

So, do you think it was more?


10 posted on 03/29/2013 3:56:03 PM PDT by GOPJ (DHS HAS secured: 1.6 BILLION bullets - 2.700 tanks and 35,000 drones ...to use on American soil...)
[ Post Reply | Private Reply | To 2 | View Replies]

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson