Saturday, February 29, 2020

#136. 총공 -- Why the Koreans have united to wage a cyber war this week

Call me vulgar, but I love drama and juicy gossip. I don't even make an effort of trying to look uninterested when people start fighting, and I shamelessly collect all the rumours and construct the entire story (God forbid should I miss even the tiniest detail!) in my head. That's probably why I got into K-Pop in the first place, and this is definitely why I started spending way too much of my time on the Korean internet.

The Korean internet has so much character. The Koreans, who are the nicest, most polite, and amazingly helpful people in real life, transform themselves into these primitive things on the internet. They usually belong to one or more "tribes" or internet communities, who hate other communities. It is surprisingly commonplace for an internet tribe to decide that justice needs to be dealt to another internet tribe, and engage in a battle. How are these battles fought? One community decides on the date and time of the attack, and everyone belonging to this community starts flooding the other community's forums with offensive posts (in the internet slang, we call it "게시판을 도배한다", or "wallpaper the forum"), eventually causing the server to crash.

The process leading up to the decision is the most fun of all. Some instigators start attracting other people's attentions with funny but witty posts detailing the crimes committed by the other community, until more and more people become emotionally embroiled in the conflict, then the hivemind of the internet community magically comes up with the date, time, and the method of attack. Given that these communities either do not have an obvious leader, or the leaders tend to discourage these kinds of behaviour, the frequency at which these attacks happen is astounding. Of course, those who are not directly impacted by the conflict also have fun, because word gets around that a battle is raging on, and the others gather around their computer screens with a bag of popcorns, and watch the battle unfold. It's even more fun if some people decide to take the battle offline, by either challenging someone to a physical fight (the appropriate internet slang is "현피뜨다") or by bringing the other person to court for libel (you can say, "고소미 먹었다.")

In Korean, the bystanders would be gleefully telling each other, "팝콘각이다!" (The situation is setting itself for some popcorns)

Take what I'm about to tell you in whatever way you prefer -- the reason I am writing this post is because probably one of the most epic internet battle in my memory of the Korean internet is unfolding as I'm writing this post. Perhaps you'd like to get a bag of popcorns; or perhaps you will feel compelled to be more proactive and help the Korean warriors (because that's what they are in this story). This story is a long and complicated one, that starts several thousand years back. Also, a disclaimer: being of Korean heritage, I am of course biased, and I have learned that history has many sides. If you feel that something is misrepresented, please leave a (nice) comment!

Everyone knows that the three (four, if you count North Korea) countries in the far east -- Korea, China, and Japan -- absolutely hate each other. I've written several posts on the Korea-Japan conflicts, but I didn't really write about why Koreans don't like China. The short story is that China, being the big and powerful neighbour, was always interested in trying to make Korea their own. Let me give you a few examples (absolutely not exhaustive).

1. The Tang Dynasty ("당나라" in Korean) attacked Goguryeo ("고구려") in 644 AD. The obstacle standing between the powerful and numerous Tang army (approximately 200,000 men) and the capital Pyongyang was a small castle called "안시성" containing 5,000 men. Miraculously, the 5,000 men held down the fort for several months, while Tang Dynasty used their strength in number to build a castle out of sand so that they could shoot into 안시성 from the same height. Funnily enough, the Goguryeo army managed to take this sand castle during heavy rain, and they stopped the Tang Dynasty from entering Pyongyang.

Fun fact: The Tang Dynasty came into power because the preceding Sui Dynasty ("수나라") was considerably weakened after their 17-year battle with 고구려 (598 AD - 614 AD), in which they were completely defeated. They really couldn't leave 고구려 alone!
2. The Yuan Dynasty "원나라" (and the preceding Song Dynasty "송나라") essentially ruled Goryeo (고려) (1259 AD - 1356 AD), and the Yuan Dynasty even had the final say in who became Goryeo's king. They went as far as replacing the current kings in office by more co-operative people, and some kings actually spent most of their lives (including while they were ruling Goryeo) in China. Of course, Goryeo periodically sent valuable goods and beautiful women to Yuan Dynasty as well.

Thankfully, Goryeo had a wise king ("공민왕") who fought to escape the Chinese rule, and he was further aided by the fact that Yuan Dynasty was on the decline, and was eventually replaced by the Ming Dynasty "명나라". Unfortunately, Goryeo also fell and Joseon (조선) came into power not too long afterwards.

This is a portrait of 공민왕 -- notice that his clothes look Chinese! Whenever Korea was under a foreign occupation, Korea always lost a piece of itself, whether it be the clothes, or its language.
3. The Qing Dynasty ("청나라") invaded Joseon (조선) in 1636. Joseon was unable to hold the Qing soldiers at bay, and in just two months, Joseon surrendered. The king of Joseon then had to kneel before the emperor of the Qing Dynasty, and agreed to be their subject. Joseon is said to have maintained a good relation with the Qing Dynasty, so this somewhat unequal relationship continued until the Japanese invasion of 1910.

Here, the Korean King 인조 is kneeling before the Qing Emperor; he was asked to kneel three times, bowing three times each time he knelt. Legend has it that 인조 was so furious that he was smashing his head against the ground each time he bowed, eventually bleeding profusely from his forehead. The Koreans still remember this event as "삼전도의 굴욕," or the humiliation at 삼전 island.
4. And of course, the Chinese army played a huge role in the Korean War (in Korean, "6.25 (육 이오) 전쟁") 1950-1953. Kim Il-Sung (김일성), the founder of North Korea, convinced the Soviet Union and China to support his war against South Korea. While Stalin was said to be concerned about the possibility of the World War III and offered minimal help, China responded more positively, sending in nearly 3 million soldiers into the Korean peninsula. Without China, North Korea probably would not exist today; and even today, China and North Korea maintain good relationship, China going as far as sending back the escaped North Korean refugees to North Korea, should they get caught (knowing that they will probably be tortured or killed).

It is often said that there were so many Chinese soldiers, that it was almost like seeing a sea of men. Koreans call this "인해전술," the strategy using so many people, so that it looks like a sea of men.

Given all these interventions of China throughout Korea's history, it is not surprising that the Koreans often regard the Chinese government with some mistrust. As long as I can remember, there were always whispered rumours of the Korean-speaking Chinese population (called "조선족" in Korean, meaning the "Joseon (조선) tribe (족)"). Surely their ancestors were from 고구려 or 고려 or 조선, and they probably live in China simply because they never made it back into Korea before Korea actually became a country that grants citizenships. Nonetheless, the long period of separation made the Koreans wary of 조선족. Are they expats who miss Korea? Would they still be loyal to Korea? Or are they simply Korean-speaking Chinese people, which perhaps makes them more dangerous?

As long as I can remember, there were always whispered rumours about these 조선족. That they are the Chinese spies. That they would not hesitate to eat human flesh. That they kidnap healthy Koreans and sell their organs. Some of the worst serial killers in the Korean history were 조선족, and it seems that a lot of phishing scams are tied to 조선족 for whatever reason. It is a fairly common reaction of the almost-scammed Koreans to start insulting the Chinese leaders (such as Xi Jinping or Mao), to see if the almost-scammer would react to it -- and if they become angry, surely they are 조선족!


For whatever reason, the Koreans believe that insulting pictures of the communist party of China will bring out the worst reaction in the Chinese people. The Koreans believe that even looking at these pictures might be enough to get the 조선족 in trouble with the communist party; I cannot verify or refute this claim, but I imagine that this belief is based on the stories of North Korea, where such things would certainly be true.

Korea has been in a political and economic turmoil for the past several months. And with the recent emergence of COVID-19, the Koreans are more fearful than ever of their future. Taking part in the Korean internet communities, I have been hearing rumours of possible Chinese collusion, that the Chinese government employed thousands of 조선족 to flood the Korean internet with pro-government propaganda to manipulate the public opinion. That these 조선족 알바 (the part-time 조선족) are getting paid per online comment that they make, and that the Chinese have already infiltrated the Korean online communities, and that most moderators are 조선족. Of course, this woman of science doesn't really believe without proof, but nonetheless, such rumours are widespread in the Korean internet.

For most people who are not interested in politics, including myself, the story began with the outbreak of COVID-19. When the story broke that a new strain of virus was discovered in Wuhan, the Koreans voiced concerns, since Korea receives a large number of tourists from China. As the infections began to spread through Wuhan, Koreans waited for the government to ban the entry of Chinese travelers. After all, many countries, including the US, Australia, Japan, North Korea, Russia, Indonesia, Malaysia, and Vietnam, have placed the ban.

List of travel bans on China; despite being marked on the map as having an entry/exit ban, Korea has restricted entry/exit for those who are coming directly from Wuhan.

Surprisingly, the ban never came. Fearful and desperate, the Koreans signed a petition for the government to impose a quick entry ban, and the total number of signatures was approximately 760,000. The doctor's association also advised the government to quickly close its borders. Every news article was flooded with pleas to the president to make a swift decision.

The government would not budge. It cited reasons that China is Korea's biggest trade partner, and that closing the border would impact our business. The government also sent large number of medical supplies, including 2 million face masks, to China. In addition, the government also announced that should the Chinese travelers get sick while being in Korea, the government would pay for their treatment, as well as their living expenses while in Korea. Finally, the government asked the Koreans not to call this disease Wuhan Pneumonia, as it encouraged hatred towards the Chinese, and to call it instead "Coronavirus."

The price of face masks skyrocketed tenfold. Even with ten times the usual price, Koreans are still having problems securing masks, even today. And various government organizations at the federal and the provincial level are still sending masks to China.

This article claims that over 100 times the usual amount of fask masks have been exported to China in January, and it doubled again in February. This is in addition to the masks that the government sent to China as aid.

Chaos seemed to reign the Korean internet. Every community could not stop talking about the "Wuhan Pneumonia (우한 폐렴)", as it became known in the Korean internet. Voices of criticism against the president Moon Jae-In and the government started getting stronger. An online petition launched in the Blue House (equivalent of the American White House) website, calling for the impeachment of the president. This petition gathered over 1.3 million signatures.

Then something strange happened. A counter-petition supporting the president also launched, and quickly gathered 1.1 million signatures. In many online forums, the top three comments in the posts criticizing the government policy would be pro-government, often calling the original poster foolish and insulting them in many ways. Weirdly enough, all comments after the top three comments would be anti-government. Soon, the Koreans noticed that the difference between the "likes (추천)" and the "dislikes (비추, short for 비추천)" was constant.

Exhibit one, the differences between likes and dislikes in the top three comments are between 661-663. The comments support the government, and blame the doctors and religious organizations for not being able to manage COVID-19.

Exhibit two, where the difference between the likes and dislikes of the top three comments are held constant at approximately 250. The fourth highest comment calls the government "the worst government ever, because the merchants are going bankrupt, citizens dying from the Wuhan Pneumonia, and the housing bubble at its highest."

The rumours of online manipulations by the Pro-China forces seemed more and more likely, although there were no definite evidences. The Koreans already knew that the internet could be manipulated; when the scandal of the former Korean minister of justice was raging on (in which the minister, Cho Kuk (조국), was caught forging his children's college and professional school applications, among other things), the top two trending search words on Naver, the largest search engine in Korea, had clear political motives. The #1 said "Courage to Cho Kuk" and #2 said "Cho Kuk must resign".


Then on February 27, two decisive things happened.

First, a post titled "어느 조선족의 고백 (Confessions of a 조선족)" appeared on the Korean internet (follow link to see the full text + translations). The writer of the post alleged that he was a 조선족 who saw himself as a Korean (and not Chinese), and that the Chinese government was involved in all aspects of the Korean society, including the presidential election. He also alleged that the 조선족 are indeed involved in manipulating the online opinions, by systematically upvoting designated pro-government comments and using their strength in numbers to make certain search terms appear to be trending.

Of course, this post was all words and no proof, and the post alone probably would not have gained much traction. After all, there are many attention-seekers ("관종") on the Korean internet who would make up a lot of fake stories.

But then, one tech-savvy Korean internaut found what many Koreans believed to be a decisive evidence of the Chinese involvement in the Korean internet communities. He thought of the idea that he would analyze the traffic to the Blue House website, which hosts the petitions to the government, including the petition to impeach the president, and the petition to support the president. If the Chinese were indeed involved in this, surely it would show from the traffic analysis! And indeed, he found that the recent Chinese traffic to the Blue House website has increased by over 70%.



One of the most popular search terms that people used to access the Blue House website was even in Chinese. Now, in the presence of a somewhat concrete evidence, the situation started to look a bit more serious.

Actually, I'm under-stating this. The Korean internet communities blew up.

And here is the one awesome thing about Koreans. They are hilarious. Especially online.

I am not sure how the other cultures would have reacted in the presence of this knowledge. But the Koreans decided that this was the right time to test out a theory that was more of an urban legend. 

The legend has it that the Chinese government often inspects the browsing history of its citizens. And the legend says that if the citizens are caught browsing websites that go against the doctrines of the Communist Party (for example, Free Tibet or dongtaiwang.com, which apparently deals with information that the Communist Party would like to block from its citizens), then they can be punished by the government. There are some who believe that people who are noticed by the Communist Party end up as exhibits in Body Worlds (in Korean, "인체의 신비" or "Mysteries of the Human Body").

The Koreans decided to make phishing links that looks like a link to the pro-president petition, but actually redirects to dongtaiwang.com when you click on it. Then they started planting these links everywhere on the Korean internet, because, you know, the 조선족 are supposed to be everywhere. Why dongtaiwang.com instead of freetibet.org? When you read "dongtaiwang" in Korean, it sounds like "동태왕". "동태" is frozen pollack, and "왕" is king. So it just sounds funnier.

Random fun fact: Pollack is "명태" in Korean, but frozen pollack is "동태".
The response to these phishing (no pun intended) links were almost immediate, and kind of astounding. When people mistakenly clicked on these phishing links (which are essentially harmless unless these urban legends are true), there were some violent reactions. Here are some reactions:

"이봐요 나에게 왜이러는겁니까" (Hey, why are you doing this to me?)
"난 그냥 개인이오" (I'm just an individual)
(mentioning the above person) "들어가셨습니까? 저 어떡해요" (Did you actually click? What am I going to do?)
"절대 절대 들어가지마세요... 해킹 당합니다... 난 그냥 개인이요" (Never never click the above link... You'll get hacked. I'm just an individual)
"난 개인이요 어디 변절을 합니까? 내 의지가 아니다" (I'm just an individual. I would never betray. It's not my free will) 


For a harmless prank, the responses were disproportionately strong, and also uniform in that many people wrote, "나는 개인이오" (I'm just an individual). Not only did this phrase not make sense, it is not a phrase frequently used in Korea. However, if it came from a 조선족, whose grammar and vocabulary are often slightly different from the Koreans, it started to make a little bit of sense.

A Korean internaut claiming to be a 조선족 explained: you can indeed get into trouble for accessing these forbidden websites. Nonetheless, the government also recognizes that people make mistakes, and often you just get off with a mild reprimand. However, if the government determines that you accessed this website as a part of an organized group action, then you can actually disappear without a trace one day, so people who have clicked this link are rightfully fearful. Since they must still stay true to their character and not give away their identity that they are actually Chinese people infiltrating the Korean web, they write in Korean "나는 개인이오" (I'm an individual) to signify to the government inspectors that they are not part of some organized group against the Chinese government.

The language barrier between China and Korea is too great that this information cannot be verified immediately. But this made the Korean internauts only too gleeful. Now taunting those who fall into this trap, the Koreans made more and more phishing links. When someone fell for it, the Koreans started telling them:

"이제 신비해지겠네" (Now you will become mysterious),
referencing the fact that they are likely to become an exhibit in "Body Worlds" (whose title in Korean is translated as "Mysteries of the human body"). Yes, I witnessed the birth of yet another internet slang phrase!

This Korean internaut claims that he succeeded in making an atomic bomb. When a suspect 조선족 clicks on his link, his computer will access all of the addresses listed above (all clearly anti-government), AND use his credentials to sign the impeachment petition.

Soon afterwards, the Koreans analyzed the visitors of dongtaiwang.com, and the results were perhaps not surprising. The ranking of the website within China went up significantly, and most visitors were from China. Since all of the phishing links were written in Korean, which most Chinese people do not speak, it does seem to add credibility to the claim that there are many Chinese people on the Korean internet.





And soon after these fake links started going up everywhere, the comments sections of online articles cleaned up considerably. The top three comments were anti-Moon, with almost no dislikes. Many people commented that they have not seen comment sections like this one in a long time.

First comment: Please investigate the Chinagate. Please.
Second comment: We must get to the bottom of the connections between Moon Jae-In and China. No sane person would do anything like this.
Third Comment: Moon Jae-In has completely lost his mind. He must really owe the Chinese.
Fourth Comment: Another phishing link targeting the 조선족...

So, as the various situational evidence started piling up, more and more people started believing this rumour of Chinese collusion. And the communities that normally hate each other (men vs. women, democrats vs. republicans, etc.) started talking to each other. They started wondering whether it was the 조선족 that exacerbated the conflicts between them. They started talking about what they could do to bring the mainstream media to pick up on this allegation.

Thus the Korean internet warriors started talking about a large-scale attack. The best course of attack online (as determined by the experienced Korean internauts) generally tends to be something that can attract the attention of the mainstream media. And the Korean mainstream media pays attention to the trending search words on Naver.

So, on March 1st (which has a historic significance, as one of the largest manifestations against the Japanese occupation happened on this day), some tens of thousands of the Korean internet warriors will gather together to launch a full-scale attack on Naver, hoping to get the search word "차이나게이트 (China Gate)" onto the top of the trending words chart. And to boost the public awareness, they will also search the words "나는 개인이오" (I'm just an individual).

They are using yet another internet slang, saying that
"3월 1일 오후 1시에 네이버 총공이야" (There will be an all-out attack on Naver on March 1st at 1pm)
where "총공" is short for "총 (everyone) 공격 (attack)". This word is normally used for K-Pop idols, that the fans are all streaming some music to put it on top of a music chart. But of course, this word is extremely relevant in this case as well.

If the attack is successful, the mainstream media will be forced to investigate and publish news articles on what has been alleged so far. The Koreans are hoping that this will be the beginning of some positive change.


This poster, advertising the attack on Naver, is now making its way around the Korean internet, hoping to recruit more people.


Of course, it is possible that they are chasing shadows. But even then, is a 총공 really that bad? It united the Korean internet communities for now, and people who would normally hate each other have set aside their differences. And if an investigation determines that there was no Chinese involvement, at least it will put everyone's mind at ease.

In any case, I am watching this case with interest, and I may even join in their efforts to bring these two words, "China Gate" and "I am just an individual" to the top of the trending search words on March 1. Because if the allegations are true, no amount of help is too small for these brave (or foolish, only time will tell) internet warriors.