Russia Is Providing North Korea With Internet Connectivity

Following the diplomatic fallout between North Korea and China, its only major trade partner, Russia is positioning itself to be a stronger North Korean ally, reaching out to provide North Korea with an Internet connection. 

Russia may embolden North Korea to launch more destructive cyberattacks. Stronger cooperation between the two raises the possibility that they will even collaborate on cyberattacks themselves, which would be devastating for the international community.

Dyn Research have reported that Russia began providing an Internet connection to North Korea since October. The Russian-provided infrastructure gives Pyongyang 60% more bandwidth and a second connection to the outside world ; China’s Unicom company had been North Korea’s sole Internet provider since 2010. 

The construction of the new Internet connection follows a September 27th meeting between  Democratic Peoples Republic of Korea (DPRK) envoys and Russian foreign ministry officials in Moscow. Russia’s extension of an Internet connection to North Korea, as well as its reopening of a ferry route between the two, may indicate that Russia will seek sanction loopholes to strengthen their partnership.

North Korea’s turn towards Russia follows Pyongyang’s aggressive nuclear testing and vociferous behavior pushing China and its investments out of the country.

After North Korea’s sixth nuclear test, the UN Security Council passed the strictest sanctions yet on the isolated country. As a result of these sanctions, China is due to close North Korean businesses operating within China and end joint ventures between the two within 120 days.

China’s compliance with new sanctions is not the only sign of tension with the DPRK. This year, Pyongyang timed its missile and nuclear tests to correspond with international meetings hosted in China. North Korea’s actions seemingly were meant to embarrass China, who it believes is siding with Washington. 

Tensions between North Korea and China have been accelerating since Kim Jong-un took power in 2011. The following year, North Korean authorities lashed out against one of Beijing’s largest mining and steel-producing companies, Xiyang Group, with whom it had signed a $40 billion deal to build an iron ore mine. North Korean officials “used violent methods” against Xiyang staff, such as depriving them of food and water, and smashing windows. North Korea eventually annulled the contract with Xiyang, after deporting employees in the dead of night.

The warming of North Korean-Russian relations does not just coincide with the souring of North Korean relations with China. It also follows a distributed denial of service (DDoS) campaign by US Cyber Command on North Korea’s intelligence agency, the Reconnaissance General Bureau. 

According to a US official, North Korean hackers complained that the resulting spotty Internet access was interfering with their work, which as of late involves stealing hundreds of millions of dollars from international banks and companies. As increasingly strict sanctions limit legal economic opportunities for North Korea, cyber heists provide for nearly a third of the value of the isolated nation’s exports.

Russia, also increasingly isolated due to sanctions and its aggressive activity, sees an opportunity in North Korea. With little investment required on its part, Russia can incorporate North Korea into its geopolitically disruptive agenda.  

Russia’s agenda involves forcing the US and its allies to exhaust more resources on cybersecurity and tend to international conflicts. Given Russia’s own economic distress from sanctions, which have caused GDP to decline since 2013, there is a strong incentive for international partnership with North Korea. 

Supplying North Korean hackers with added bandwidth and capability to attack national banks and companies allows Russia to finance cyber-disruption. Worse, with Russian support, North Korea will feel emboldened to launch more destructive cyberattacks.

Russia and North Korea make natural allies in that they are aligned against the United States and its US allies, and it is highly possible that they have collaborated in cyber-attacks in some capacity. The US government and private security companies have identified the two as principal threats to national security based on their previous cyberattacks.
Russia has continuously used cyber methods to maintain its influence on the former Soviet area as part of hybrid warfare campaigns by combining conventional power with cyber capabilities. 

During Putin’s tenure, Estonia, Georgia, and Ukraine have been victims of Russian cyberattacks. Similarly, North Korea has been accused of numerous cybersecurity incidents, such as the Sony Pictures hack in 2014, stealing $101 million from the Bangladeshi central bank, and the worldwide WannaCry ransomware attack this year.

Thus, Russia is quietly laying the groundwork to establish itself as a stronger North Korean partner while China-North Korea relations are cooling. 

This development coincides with the restoration of a Russian-North Korean railroad project, connecting Khasan (near Vladivostok) with Rajin (a port in North Korea). In addition, on October 10th, Russia reopened a ferry route to North Korea, despite the sanctions’ calls to curtail economic cooperation between UN Security Council member states and North Korea.
While China no longer wants to be accused by the international community of supporting a rogue state, Russia is not swayed by such accusations. Both Russia and North Korea have proved they will use any means feasible to disrupt international affairs. 

Whether it is by sending unmarked soldiers across borders, occupying a neighboring country, hacking power grids, or launching ransomware attacks against hospital computers, a strong Russian-North Korea partnership presents a much graver cyber threat than ever before. 

If Russia and the North Korea collaborate to unleash more aggressive cyberattacks, and it is looking like that will be the case, the international community needs to better prepare itself.

Forbes:  

You Might Also Read:

N. Korea Is Ready For Global Cyber Conflict:

Microsoft Chief Says N. Korea Was Behind 'WannaCry':

Hillary Clinton’s Cyber Warfare Warning:
 

« The Promise & Peril Of Trump’s Cyber Strategy
Bitcoin: UK And EU Will Crackdown On Crime & Tax Evasion. »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

ON-DEMAND WEBINAR: What Is A Next-Generation Firewall (and why does it matter)?

ON-DEMAND WEBINAR: What Is A Next-Generation Firewall (and why does it matter)?

Watch this webinar to hear security experts from Amazon Web Services (AWS) and SANS break down the myths and realities of what an NGFW is, how to use one, and what it can do for your security posture.

XYPRO Technology

XYPRO Technology

XYPRO is the market leader in HPE Non-Stop Security, Risk Management and Compliance.

ManageEngine

ManageEngine

As the IT management division of Zoho Corporation, ManageEngine prioritizes flexible solutions that work for all businesses, regardless of size or budget.

Jooble

Jooble

Jooble is a job search aggregator operating in 71 countries worldwide. We simplify the job search process by displaying active job ads from major job boards and career sites across the internet.

Alvacomm

Alvacomm

Alvacomm offers holistic VIP cybersecurity services, providing comprehensive protection against cyber threats. Our solutions include risk assessment, threat detection, incident response.

DCL Search & Select

DCL Search & Select

DCL Search & Selection connect candidates to the best companies in the IT Security, Telco, UC, Outsourcing, ERP, Audit & Control markets.

IT GRC Forum

IT GRC Forum

The IT GRC Forum is an online resource and networking platform for the Governance, Risk Management, and Compliance (GRC) community

FireEye

FireEye

FireEye delivers unmatched detection, protection and response technology through an extensible and flexible cloud-based XDR platform.

Cyber Security & Information Systems Information Analysis Center (CSIAC)

Cyber Security & Information Systems Information Analysis Center (CSIAC)

CSIAC is chartered to leverage best practices and expertise from government, industry, and academia on cyber security and information technology.

Radiflow

Radiflow

Radiflow is a leading provider of cyber security solutions for critical infrastructure networks (i.e. SCADA), such as power utilities, oil & gas, water and others.

Clari5

Clari5

Clari5 redefines real-time, cross channel banking Enterprise Fraud Management using a central nervous system approach to fight financial crime.

Perseus Cyber Security

Perseus Cyber Security

Perseus provides all-around digital protection for small and medium-sized businesses through state-of-the-art software solutions, flexible online training and emergency response.

bluedog Security Monitoring

bluedog Security Monitoring

Sentinel from bluedog provides powerful and affordable internal network monitoring.

Business Hive Vilnius (BHV)

Business Hive Vilnius (BHV)

BHV is one of the oldest startup incubator and technology hubs in the Baltics, primarily focused on hardware, security, blockchain, AI, fintech and enterprise software.

Patriot Cyber Defense

Patriot Cyber Defense

Patriot Cyber Defense is a Cyber Security and Management Consulting professional services firm.

1898 & Co

1898 & Co

Keep your critical assets secure with a comprehensive portfolio of services from high-level assessments to fully managed security services designed for operational technology applications.

Gulf Business Machines (GBM)

Gulf Business Machines (GBM)

GBM is a leading end-to-end digital solutions provider, offering the broadest portfolio, including industry-leading digital infrastructure, digital business solutions, security and services.

EdgeWatch

EdgeWatch

EdgeWatch is a platform that helps information accredited security practitioners discover, monitor, and analyze devices that are accessible from the Internet.

MLSecOps Community

MLSecOps Community

The MLSecOps Community is a collaborative space for machine learning security experts and industry leaders to connect and shape the future of AI/ML security.

StealthMole

StealthMole

StealthMole is a deep and dark web threat intelligence company that delivers a cloud-based, unified platform for digital investigation, risk assessment, and threat monitoring.

Infosec Ventures

Infosec Ventures

Infosec Ventures incubates and scales cyber security innovators that solve inefficiencies in cyber security.