Investigators are finding evidence of China’s involvement in the hacking attack that shut down computers in three major South Korean banks and three television networks.  The initial investigation focused on North Korea, which isn't in the clear just yet.

The malware code found in around 32 Thousand South Korean servers is associated with past hacks from China, according to the Korean Communications Commission.  And the attacks trace back to a Chinese IP address.

But that’s hardly conclusive.  Hackers are able to fake the originating IP address of their attacks.

North Korea had been blamed from previous hacks in 2009 and 2011.  And Professor Ryou Jae Cheol of Chungnam National University still sees Ptongyang’s involvement, saying that “Discovering that the code was from China makes it more likely that the attack was from North Korea, because a lot of North Korean hackers operate there.”