Hackers used multiple IPs used to hide origins of financial cyberattacks: Police

A considerable number of internet protocol (IP) addresses were found to have been used to mask those responsible for recent cyberattacks against Korean financial institutions, sources said on Wednesday.

Several financial companies, including Hana Bank, KB Kookmin Bank and Shinhan Bank, suffered back-to-back leaks of customer information in recent hacking attacks, prompting a major police investigation.

While the Financial Supervisory Service identified 28 IP addresses connected to the attacks, police have determined that a significant number of them were used to hide the hackers’ whereabouts, according to the sources.

Investigators are said to be tracing the attack path through international cooperation.

The financial watchdog earlier shared the IP addresses and country information with financial companies and noted that attackers may have used indirect connections.

In response to the cyberattacks, the National Police Agency formed a 28-member team to investigate the case.

Yonhap