Tech content trusted by users in North America and around the world
7,246 Reviews & Articles | 52,560 News Posts

Cyber attack on South Korea wiped master boot records of affected PCs

South Korean cyber attack wiped HDDs, destroying their master boot record
By: Anthony Garreffa | Hacking & Security News | Posted: Mar 22, 2013 9:31 am

Nearly 48 hours ago, South Korea saw a cyber attack that took down multiple banks and TV stations. It's now being reported that the cyber attack wiped the HDDs of the affected PCs, according to McAfee's analysis on the attack.




The PCs were infected by malware, wiping the master boot record (MBR) of the affected PCs. The MBR on a HDD contains crucial information on how the file systems on a HDD are organized, messing with this can take down a system easily. The malware used overwrote the data in the MBR with some weird characters: "PRINCPES, PR!NCPES, HASTATI." The attack also overwrote some random parts of the file system with the same weird characters.


The systems affected were then given a forced reboot command, but because the MBR and file system were attacked and thus corrupted, the restart was unable to complete.

Related Tags

Got an opinion on this news? Post a comment below!