SONY-CYBERSECURITY/NORTHKOREA For North Korea's cyber army, long-term target may be telecoms, utility grids

Record ID: 451743

  • Title: SONY-CYBERSECURITY/NORTHKOREA For North Korea's cyber army, long-term target may be telecoms, utility grids
  • Date: 19th December 2014
  • Summary: ULSAN, SOUTH KOREA (FILE) (REUTERS) VARIOUS EXTERIORS OF SHIN KORI NUCLEAR POWER PLANT BUSAN, SOUTH KOREA (FILE) (REUTERS) VARIOUS EXTERIORS OF KORI NUCLEAR POWER PLANT
  • Embargoed: 3rd January 2015 12:00
  • Keywords:
  • Topics: General
  • Reuters ID: LVA7LTJ4VF9HXDKU4T5LI1Y97YAI
  • Story Text: EDITORS PLEASE NOTE: THIS EDIT CONTAINS MATERIAL WHICH WAS ORIGINALLY 4:3
    EDITORS PLEASE NOTE: THIS EDIT CONTAINS EDITED KRT MATERIAL
    The hacking attack on Sony Pictures may have been practice for North Korea's elite cyber-army in a long-term goal crippling telecoms and energy grids in rival nations, defectors from the isolated state said.
    Non-conventional capabilities like cyber-warfare and nuclear technology are the weapons of choice for the impoverished North to match its main enemies, they said.
    Obsessed by fears that it will be over-run by South Korea and the United States, North Korea has been working for years on the ability to disrupt or destroy computer systems that control vital public services such as telecoms and energy utilities, according to one defector.
    "One of North Korea's ultimate goals in cyber attack is to steal important documents on politics and military from enemy countries such as South Korea and the United States. Also, North Korea is aware of that cyber attack is an effective measure equivalent to military attack," said Kim Heung-kwang, a defector from the North who was a computer science professor and says he maintains links with the community in his home country.
    "The hacking of Sony Pictures is similar to previous attacks by North Korea to the South's organizations. North Korea is also preparing for more detailed cyber attack on national infrastructure of South Korea," Kim added, who came to the South in 2004.
    The North's most successful cyber-attack to date may be the hacking at Sony Corp that led to the studio cancelling a comedy on the fictional assassination of North Korean leader Kim Jong Un.
    Although not officially accused by Washington, U.S. government sources said on Wednesday (December 17) that investigators had determined the attack was "state sponsored" and that North Korea was the government involved.
    For years, North Korea has been pouring resources into a sophisticated cyber-warfare cell called Bureau 121, run by the military's spy agency and staffed by some of the most talented computer experts in the country, North Korean defectors have said.
    Most of the hackers in the unit are drawn from the military computer school.
    Although North Korea diverts much of its scarce resources to the military, its outdated Soviet-era tanks, planes and small arms are at a stark disadvantage to next-generation capabilities of its adversaries.
    It has, however, invested significant time and money in its asymmetric warfare capabilities, which include a vast fleet of mini-submarines and thousands of state-sponsored hackers.
    "When you look at military capabilities, there are various aspects like nuclear and conventional. But with the economic environment and difficulties (the North) faces, there is bound to be limitation in raising nuclear capabilities or submarines or conventional power. But cyber capability is all about people," said Lim Jong-in, dean of the Korea University Graduate School of Information Security in Seoul, adding he believes hacking is the most effective path to strengthening the North's military power.
    In 2013, South Korea blamed the North for crippling cyber-attacks that froze the computer systems of its banks and broadcasters for days.
    More than 30,000 computers at South Korean banks and broadcast companies were hit in March that year, followed by an attack on the South Korean government's web sites.
    South Korea's intelligence agency declined to comment on networks that remain vulnerable to North Korean hacking. Its national police, which runs an anti-cyber crimes operation, also did not comment.
    But officials at the country's gas utility and the operator of 23 nuclear reactors that supply a third of the electricity for Asia's third largest economy said contingency plans are in place to counter infiltration.
    An official for Korea Gas Corp, the world's largest corporate buyer of liquefied natural gas, said it has been working with the National Intelligence Service against potential cyber threats.
    But highlighting the vulnerability to hacking, the network of Korea Hydro & Nuclear Power was recently compromised, resulting in the leak of personal information of employees, the blueprints of some nuclear plant equipment, electricity flow charts and estimates of radiation exposure on local residents.
    Preliminary investigations have found no evidence that the nuclear reactor control system was hacked but an added layer of alert against cyber infiltration has been ordered for major energy installations, the Industry and Energy Ministry said on Friday (December 19).
  • Copyright Holder: FILE REUTERS (CAN SELL)
  • Copyright Notice: (c) Copyright Thomson Reuters 2014. Open For Restrictions - http://about.reuters.com/fulllegal.asp
  • Usage Terms/Restrictions: None
Register