North Korea stole hundreds of classified military documents from South
Hackers’ haul included detailed wartime operational plans involving the US, and procedures for ‘decapitation’ attacks on Kim Jong-un
Seoul — North Korean computer hackers have stolen hundreds of classified military documents from South Korea — including detailed wartime operational plans involving its US ally, a report said on Tuesday.
Rhee Cheol-hee, a legislator for the ruling Democratic party, said the hackers had broken into South Korea’s military network last September and gained access to 235GB of sensitive data, the Chosun Ilbo daily reported.
Among the leaked documents was one, Operational Plans 5015, for use in case of war with the North and including procedures for "decapitation" attacks on leader Kim Jong-un, the paper quoted Rhee as saying.
Rhee, a member of parliament’s defence committee, could not be reached for comment but his office said he had been quoted correctly.
The report comes amid heightened fear of conflict on the Korean peninsula, fuelled by US President Donald Trump’s continued threats of military action against Pyongyang to tame its weapons ambitions.
In his latest tweet at the weekend, Trump reiterated that diplomatic efforts with North Korea have consistently failed, and "only one thing will work".
Citing Seoul’s defence ministry, Rhee said that 80% of the leaked documents had yet to be identified.
But the contingency plan for the South’s special forces was stolen, he said, as well as details about annual joint military drills with the US and information on key military facilities and power plants.
A ministry spokesman declined to confirm the report, citing intelligence matters.
In May the ministry said North Korea had hacked into Seoul’s military intranet but did not say what had been leaked.
Pyongyang has a 6,800-strong unit of trained cyber-warfare specialists, according to the South Korean government. It has been accused of launching high-profile cyber attacks including the 2014 hacking of Sony Pictures.
The Chosun Ilbo story was the second report Tuesday of military-related cyber-attacks in the Asia-Pacific.
Australia’s government said separately an unidentified defence contractor had been hacked and a "significant amount of data" stolen.
There were 47,000 cyber incidents in the past 12 months, a 15% increase from the previous year, Cyber Security Minister Dan Tehan said in Canberra as he launched a report by the Cyber Security Centre.
The defence contractor was exploited via an internet-facing server, with the cyber-criminals using remote administrative access to remain in its network, the report said.
The Australian newspaper reported that the hacker was based in China but Tehan told the Australian Broadcasting Corporation that "we don’t know and we cannot confirm exactly who the actor was".