[REVISION HISTORY]
North Korean state cyber operations
1 recorded revision of this situation.
What changed
2026-11-01 22:04 UTC → 2026-11-06 10:04 UTC ·
added
removed
North Korea has faced both domestic internet disruptions and international scrutiny regarding its cyber capabilities. In October 2026, over 40 state-managed websites, including the Ministry of Foreign Affairs and the KCNA news agency, experienced outages lasting approximately 32 hours. Analysis by the firm Kentik suggested these disruptions were caused by a Distributed Denial-of-Service (DDoS) attack involving traffic from Vietnam, the Philippines, and Venezuela, though some experts noted that unstable power supplies might also be a factor. Parallel to these disruptions, South Korean intelligence reports indicate that North Korea has expanded its specialized hacking workforce to approximately 8,400 personnel. Under the direction of Kim Jong Un, these operatives reportedly target banks, technology firms, and cryptocurrency platforms to conduct espionage and bypass international sanctions. One such operation, linked by U.S. authorities to the group TraderTraitor, allegedly involved the theft of 6.3 billion dollars in digital assets from the exchange Binance. Intelligence assessments show New reports suggest the number existence of cyber personnel has grown from roughly 6,800 in 2022 a systematic state-sponsored program where the government selects highly intelligent middle school students, aged 11 to 12, for intensive computer engineering training lasting over a decade. These operatives are reportedly trained in cryptocurrency protocols and the current 8,400, with reports reverse engineering of technical cooperation occurring foreign hardware. Successful participants allegedly receive privileges such as luxury apartments in China Pyongyang and Russia. the ability to travel to allied nations. While North Korea has dismissed these allegations as “political provocations,” former trainers have described the program as a “secret weapon” intended to provide the regime with strategic and financial capabilities.
Versions
- 2026-11-06 10:04 UTC North Korean state cyber operations
- 2026-11-01 22:04 UTC North Korean state cyber operations
Select a version to see what changed compared to the one before it.