North Korea's Internet Is Faltering

Every website in North Korea has suffered from a complete outage on at least two incidents in the last month. The country's internet appears to have been hit by two complete shutdowns, possibly caused by a distributed denial-of-service (DDoS) attack. 

Experts think the outages may be the result of cyber attacks against North Korea, though there are other possible explanations.

North Korea experienced intermittent outages until an incident on January 14th crippled all of the country's websites, as domain names ending in ".kp," which include websites for North Korea's state-run media outlets, began to fall over. 

There is a contradiction over access to technology in North Korea.While around 10%of  North Koreans have a smart phone and personal computers are available, the great majority of citizens are denied access to the world wide web. They can access the country's own intranet, with websites of North Korean news, cookery and innocuous topics, but can't get anywhere near outside websites. Mobile phones users  are not able to make overseas calls or access the web.

North Korea also has its own very tightly regulated intranet called Kwangmyong, or Bright, to which a slightly larger elite group has access. This provides a connection between industry, universities and government, and is believed to be used mainly to pass information rather than entertainment or commerce.

This outage follows a period of intermittent outages lasting several hours and during these outages, North Korean servers could not be used.The way the connections failed suggests North Korea's entire IT infrastructure was hit by a distributed denial-of-service (DDOS) attack. US tech companies monitoring the North Korean web network, which has only about 1,000 web addresses and is accessible only to a handful of government officials, said it appeared to have suffered a concerted DDoS attack, in which a target’s Internet equipment is overwhelmed by spurious traffic.

Outages can also be the result of domestic power outages or other local infrastructure issues, but the nature of the recent outages struck experts as unusual. Internet outages are often seem to occur in North Korea, which knocked government and state media sites offline with a botched software update last year. 

While there has been some speculation that the outages could be the result of actions taken by the US, China, or someone else at odds with North Korea, experts have been reluctant to assign any responsibility given the unknowns surrounding them. 

In  December 2021,North Korea suffered a complete Internet link failure, resulting in loss of Internet access from outside the country for which the United States is suspected.

Business Insider:      Japan Times:       Guardian:      BBC:     

You Might Also Read: 

DDoS Attack Knocks Out Andorra's Internet:

 

« Britain's Cyber Security Strategy Focuses On Resilience
Winner: NSA Best Cyber Security Research Paper »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

LockLizard

LockLizard

Locklizard provides PDF DRM software that protects PDF documents from unauthorized access and misuse. Share and sell documents securely - prevent document leakage, sharing and piracy.

ON-DEMAND WEBINAR: What Is A Next-Generation Firewall (and why does it matter)?

ON-DEMAND WEBINAR: What Is A Next-Generation Firewall (and why does it matter)?

Watch this webinar to hear security experts from Amazon Web Services (AWS) and SANS break down the myths and realities of what an NGFW is, how to use one, and what it can do for your security posture.

North Infosec Testing (North IT)

North Infosec Testing (North IT)

North IT (North Infosec Testing) are an award-winning provider of web, software, and application penetration testing.

Jooble

Jooble

Jooble is a job search aggregator operating in 71 countries worldwide. We simplify the job search process by displaying active job ads from major job boards and career sites across the internet.

Chertoff Group

Chertoff Group

The Chertoff Group provide security advice and risk management services covering cyber security, insider threat, physical security and asset protection.

Coalfire

Coalfire

Coalfire specialises in cyber risk management and compliance. Our services span the cybersecurity lifecycle from advisory and compliance, to testing and engineering, monitoring and optimization.

Redcentric

Redcentric

Redcentric is a leading UK IT managed services provider. We deliver managed IT, cloud computing, data backup, information security services and managed networks.

Scantist

Scantist

Scantist is a cyber-security spin-off from Nanyang Technological University (Singapore) which leverages its expertise to provide vulnerability management solutions to enterprise clients.

CyberSaint Security

CyberSaint Security

CyberSaint’s CyberStrong Platform empowers organizations to implement automated, intelligent cybersecurity compliance and risk management.

Patriot Cyber Defense

Patriot Cyber Defense

Patriot Cyber Defense is a Cyber Security and Management Consulting professional services firm.

Breadcrumb Cybersecurity

Breadcrumb Cybersecurity

Breadcrumb Cybersecurity is a cybersecurity and advisory firm. We specialize in penetration testing, threat hunting, incident response, regulatory compliance, and employee training services.

ECHO Project

ECHO Project

The main objective of ECHO is to strengthen the cyber defence of the European Union, enhancing Europe’s technological sovereignty through effective and efficient multi-sector collaboration.

NordLayer

NordLayer

NordLayer is an adaptive network access security solution for modern businesses — from the world’s most trusted cybersecurity brand, Nord Security. 

Exium

Exium

At Exium we’ve integrated networking and security in a cloud-delivered Zero Trust platform powered by 5G and open source.

Forward Global

Forward Global

Forward Global designs and delivers services and technologies to manage digital, economic, and information risks.

Trickest

Trickest

Trickest enables Enterprises, MSSPs, and Ethical Hackers to build automated offensive security workflows from prototype to production.

Levio

Levio

Levio is a digital native business and technology consulting firm. As a true partner from start to finish, our goal is a long-lasting transformation that’s right for your business model.

Vernetzen

Vernetzen

Vernetzen is an industrial network and cybersecurity innovator focused on delivering practical solutions to connect and secure industry across the globe.

Skillfield

Skillfield

Skillfield is a Melbourne based Cyber Security and Data Services consultancy and professional services company.

CyberAI Group

CyberAI Group

CyberAI's mission is to pioneer the evolution of the cybersecurity landscape globally, by strategically acquiring and elevating IT consulting firms into leaders of cybersecurity innovation.