N. Korea accuses S. Korea, U.S. of cyberattacks

SEOUL, South Korea — North Korea on Friday blamed South Korea and the United States for cyberattacks that temporarily shut down websites this week at a time of elevated tensions over the North’s nuclear ambitions. Experts, however, indicated it could take months to determine what happened and one analyst suggested hackers in China were a more likely culprit.

Internet access in Pyongyang was intermittent on Wednesday and Thursday, and Loxley Pacific Co., the broadband Internet provider for North Korea, said it was investigating an online attack that took down Pyongyang servers. A spokesman for the Bangkok-based company said Friday that it was not clear where the attack originated.

North Korea’s official Korean Central News Agency blamed the shutdown on the United States and South Korea, accusing the allies of expanding an aggressive stance against Pyongyang into cyberspace with “intensive and persistent virus attacks.”

South Korea denied the allegation and the U.S. military declined to comment.

Loxley Pacific, which has provided broadband Internet service in North Korea through a joint venture with the government since 2010, said the Internet was back to normal Friday. AP journalists in Pyongyang also were able to access the Internet again Friday after two days of disruptions. Most North Koreans do not have access to the Internet, which remains restricted to a select group.

The cyberattack accusation comes amid a torrent of North Korean criticism against the U.S. and South Korea for holding routine joint military drills that Pyongyang considers preparations for an invasion. North Korea also is incensed by U.N. sanctions punishing Pyongyang for testing a nuclear device that it claims to need as a defense against U.S. aggression.

“The U.S. thinks that only it can have nuclear weapons. But we have nuclear weapons for justice, and for the sovereignty of our country,” Lt. Ri Yong Kwon of the North’s Korean People’s Army said Friday at the heavily militarized border dividing the Korean Peninsula.

Increasingly, many nations see cyberspace as a new front for warfare. China and the U.S. have accused one another of state-backed cyberspying.

Accusations of cyberattacks on the Korean Peninsula are not new, but it is usually South Korea accusing the North of unleashing hackers on its computer networks. Seoul believes Pyongyang was behind at least two cyberattacks on local companies in 2011 and 2012.

South Korean security experts questioned North Korea’s quick blame of Washington and Seoul because it can take months to trace the source of a cyberattack and hackers can easily disguise their locations.

Individual hackers in China, where information about North Korea’s cyberspace and computer software is more widely available than in the U.S. and South Korea, are more likely to blame in this case, said Lim Jong-in, dean of Korea University’s Graduate School of Information Security in Seoul.

“There are many Chinese Internet users who have expressed their hatred of North Korea these days. I think it’s more likely that some of them launched cyberattacks on North Korean websites,” said Lim. “Many in China know much more about North Korea’s IT environments.”

Self-styled Chinese patriotic hackers have attacked the websites of foreign governments and private corporations at times of tension with Japan, France, Germany and others. Outrage might be sparked by territorial disputes, diplomatic snubs or perceived insults to China.

Such hackers, working individually or in tight networks, with or without government knowledge, may have been similarly riled up over North Korea’s latest provocations, including the Feb. 12 nuclear test.

China had urged North Korea not to conduct the provocative test, and Beijing gave its support to U.N. sanctions punishing Pyongyang in the wake of the underground explosion, the North’s third. The test has drawn vocal criticism from middle-class urban Chinese and even government-backed scholars.

Talk to us

> Give us your news tips.

> Send us a letter to the editor.

> More Herald contact information.

More in Local News

Gage Wolfe, left, a senior at Arlington High School and Logan Gardner, right, a senior at Marysville Pilchuck High School work with their team to construct wooden framed walls, copper plumbing, electrical circuits and a brick facade on Tuesday, Feb. 10, 2026 in Marysville, Washington. (Olivia Vanni / The Herald)
High schoolers construct, compete and get career-ready

In Marysville, career technical education students showed off all they’d learned at the SkillsUSA Teamworks Competition.

The Edmonds City Council on Tuesday, Jan. 6 in Edmonds, Washington. (Will Geschke / The Herald)
Edmonds issues moratorium on development in Deer Creek aquifer

The ordinance passed unanimously Tuesday, giving the city time to complete a study on PFAS in the area.

Taylor Scott Richmond / The Herald
Getchell High School students protest ICE during their walkout demonstration on Wednesday in Marysville.
Marysville students peacefully protest ICE

Around 150 Getchell High School students walked out of school to line 67th Avenue Northeast as cars drove by on Wednesday morning.

Logo for news use featuring Snohomish County, Washington. 220118
Snohomish County voters continue to approve most school levies, bonds

The Monroe School District operations levy, which was failing after initial results, was passing Thursday with 50.4% of the vote.

People fish from the pier, hold hands on the beach and steer a swamped canoe in the water as the sun sets on another day at Kayak Point on Monday, June 12, 2023, in Stanwood, Washington. (Ryan Berry / The Herald)
Kayak Point Park construction to resume

Improvements began in 2023, with phase one completed in 2024. Phase two will begin on Feb. 17.

Everett
Everett to pilot new districtwide neighborhood meetings

Neighborhoods will still hold regular meetings, but regular visits from the mayor, city council members and police chief will take place at larger districtwide events.

A truck drives west along Casino Road past a new speed camera set up near Horizon Elementary on Wednesday, May 8, 2024 in Everett, Washington. (Olivia Vanni / The Herald)
Crashes, speeding down near Everett traffic cameras

Data shared by the city showed that crashes have declined near its red light cameras and speeds have decreased near its speeding cameras.

Community Transit is considering buying the Goodwill Outlet on Casino Road, shown here on Tuesday, Jan. 6, 2026 in Everett, Washington. (Will Geschke / The Herald)
Community Transit to pay $25.4M for Everett Goodwill property

The south Everett Goodwill outlet will remain open for three more years per a proposed lease agreement.

Logo for news use featuring Snohomish County, Washington. 220118
Parent support collaborative worries money will run out

If funding runs out, Homeward House won’t be able to support parents facing drug use disorders and poverty.

Carlos Cerrato, owner of Taqueria El Coyote, outside of his food truck on Thursday, Jan. 29, 2026 in Lynnwood. (Olivia Vanni / The Herald)
Everett proposes law to help close unpermitted food carts

The ordinance would make it a misdemeanor to operate food stands without a permit, in an attempt to curb the spread of the stands officials say can be dangerous.

Clothing Optional performs at the Fisherman’s Village Music Festival on Thursday, May 15 in Everett, Washington. (Will Geschke / The Herald)
Everett music festival to end after 12 years

The Everett Music Initiative is ending the Fisherman’s Village Music Festival, the nonprofit’s flagship event that was first held in 2014.

Arlington Mayor Don Vanney tours the city’s Volunteers of America Western Washington food distribution center. (Provided photo)
Arlington food center receives 32,000-pound donation

The gift will be distributed to food banks across Snohomish County, providing more than 26,000 meals.

Support local journalism

If you value local news, make a gift now to support the trusted journalism you get in The Daily Herald. Donations processed in this system are not tax deductible.