CONFERENCE Watch Now: Threat Detection & Incident Response (TDIR) Summit - Watch Event On-Demand
Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cyberwarfare

North Korea Gets Second Web Connection Via Russian Firm

A state-owned Russian company has opened up a second internet connection for North Korea which could strengthen Pyongyang’s cyber capabilities and undermine US efforts to isolate the regime, security experts said.

A state-owned Russian company has opened up a second internet connection for North Korea which could strengthen Pyongyang’s cyber capabilities and undermine US efforts to isolate the regime, security experts said.

The activation of the new line from TransTeleCom was first detected Sunday by analysts at Dyn Research, which monitors global internet connectivity.

The new connection supplements the existing link provided by China Unicom, which has almost exclusively routed North Korean internet traffic since 2010.

The additional line gives Pyongyang “significantly more resilience against attacks on their network infrastructure,” said Bryce Boland, the chief technology officer in the Asia-Pacific for cybersecurity firm FireEye.

The Washington Post reported earlier that the US Cyber Command had carried out attacks against hackers in North Korea aimed at cutting off their access to the Internet.

The operation ended Saturday, the report said.

North Korea has a 6,800-strong unit of trained cyberwarfare specialists, according to Seoul’s defence ministry, and has been accused of launching high-profile cyberattacks including the 2014 hacking of Sony Pictures.

RelatedU.S. Cyber Command Launched DDoS Attack Against N. Korea: Report

Advertisement. Scroll to continue reading.

But with only one internet provider to rely on, the regime has often found itself vulnerable to external cyberattacks against its own network infrastructure.

North Korea suffered several internet connection failures — some which lasted for hours — shortly after the Sony attack, which many suspected to be a US retaliation.

With the alternate route from Russia, “the possibility of disconnecting North Korea from the Internet just became much more difficult,” Boland said.

Written By

AFP 2023

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join this event as we dive into threat hunting tools and frameworks, and explore value of threat intelligence data in the defender’s security stack.

Register

Learn how integrating BAS and Automated Penetration Testing empowers security teams to quickly identify and validate threats, enabling prompt response and remediation.

Register

People on the Move

Jeremy Koppen has left Mandiant after 13 years to become the CISO of Equifax.

Engineering and technology solutions provider Amentum has appointed Max Shier as its CISO.

PAM provider Keeper Security has appointed Shane Barney as its Chief Information Security Officer.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.