Some of the malicious code that paralyzed network systems at South Korean banks and TV broadcasters originated from a local computer, Seoul's communications watchdog said Friday.
Local TV broadcasters KBS, MBC and YTN along with Shinhan, NongHyup and Jeju banks suffered a massive network failure on Wednesday that halted financial services and crippled operations.
In a press release, the Korea Communications Commission (KCC) said it had mistaken a private Internet Protocol (IP) address used by NongHyup as an IP address allocated to China. The International Corporation for Assigned Names and Numbers (ICANN) allocates official IP address ranges by country.
The announcement comes a day after the KCC said a Chinese IP address (18.104.22.168) accessed NongHyup's update management server and generated malicious files, fueling speculations over the Democratic People’s Republic of Korea (DPRK)'s involvement.
The KCC's earlier announcement on the China link has fueled suspicions that Pyongyang masterminded the cyber attack amid heightening tension between the two nations.
South Korea has accused the DPRK of carrying out a series of cyber attacks on the Web sites of government agencies and financial institutions over the past few years, though the DPRK has denied the allegations.