Life Inside North Korea’s Hacker Army

TL;DR

North Korea uses hackers abroad to fund its regime.

Transcript

Sony Pictures Entertainment is reeling from what may be the biggest and most devastating computer hacking in Hollywood's history. Hackers attacked in waves. First, crippling Sony's internal systems, then leaking five Sony movies online. Today, the U.S. government pointed the finger of blame directly at North Korea for the devastating cyber attack a... Read More

Key Insights

• The Sony Pictures hack was a major cyber attack attributed to North Korea, highlighting the country's cyber capabilities and intentions.
• North Korean hackers are sent to countries like China to gather intelligence and generate revenue for the regime.
• North Korea's cyber program began in the 1970s, evolving into a military tool under Kim Jong Il and further emphasized by Kim Jong Un.
• Due to limited resources, North Korea focuses on asymmetric warfare, including cyber attacks, to gain strategic advantages.
• North Korean hackers often work from abroad to avoid internal exposure to foreign information and to better control operations.
• Defectors reveal that hackers face strict quotas and propaganda sessions, with severe consequences for non-compliance.
• The story of Jong, a defector, illustrates the personal struggles and disillusionment faced by North Korean hackers.
• Despite their skills, North Korean hackers live under constant pressure, with most of their earnings going to the regime.

Questions & Answers

Q: What was the significance of the Sony Pictures hack?

The Sony Pictures hack was significant because it was one of the largest and most devastating cyber attacks in Hollywood's history, attributed to North Korea. It highlighted North Korea's cyber capabilities and intentions, as the attack disrupted Sony's systems and leaked sensitive information. The U.S. government pointed to North Korea as responsible, marking it as a serious attack on the free world.

Q: How did North Korea's cyber program begin and evolve?

North Korea's cyber program began in the 1970s with students learning coding in countries like Russia and China. Initially aimed at improving factory productivity, it evolved into a military tool under Kim Jong Il, who developed a team of hackers. Kim Jong Un further emphasized cyber capabilities, recognizing their strategic importance in asymmetric warfare.

Q: Why does North Korea send hackers abroad?

North Korea sends hackers abroad to countries like China to avoid internal exposure to foreign information and to better control operations. Operating abroad also allows hackers to access better information and resources, crucial for their tasks. Additionally, it helps the regime manage and regulate the hackers more effectively, ensuring compliance with their objectives.

Q: What challenges do North Korean hackers face?

North Korean hackers face challenges such as strict quotas and mandatory propaganda sessions. They must meet financial targets, and failure results in pressure and potential repatriation. Hackers live under constant surveillance, with most earnings going to the regime. This environment leads to stress, disillusionment, and, for some, eventual defection.

Q: How do defectors like Jong describe their experiences?

Defectors like Jong describe experiences of strict control, pressure to meet financial quotas, and mandatory propaganda sessions. Jong, who defected after an altercation with an official, highlights the personal struggles and disillusionment faced by hackers. Despite their skills, they live under constant pressure, with limited freedom and most earnings going to the regime.

Q: What role does cyber warfare play in North Korea's strategy?

Cyber warfare plays a crucial role in North Korea's strategy as it offers a cost-effective means to gain strategic advantages. With limited resources and under international sanctions, North Korea focuses on asymmetric warfare, including cyber attacks, to disrupt adversaries and generate revenue, without the high costs of conventional weapons.

Q: How do North Korean hackers generate income for the regime?

North Korean hackers generate income for the regime by engaging in cyber attacks, reverse engineering software, and creating bots for online games. They work on freelance platforms, taking orders from global clients. Most of their earnings are wired to accounts controlled by minders, with hackers required to meet financial quotas set by the regime.

Q: What leads North Korean hackers to defect?

North Korean hackers are driven to defect by disillusionment and the oppressive environment they face. Access to outside information and the internet sparks realization of discrepancies between reality and regime propaganda. Combined with strict quotas, propaganda sessions, and pressure, these factors lead some hackers to take the risk of defecting for freedom.

Summary & Key Takeaways

• North Korea has developed a sophisticated hacking operation, sending its hackers abroad to countries like China to engage in cyber attacks and generate revenue for the regime. The Sony Pictures hack is one of the most notable examples of their capabilities, attributed to North Korean hackers by the U.S. government.

• The cyber program began in the 1970s, evolving into a strategic military tool under Kim Jong Il and further emphasized by Kim Jong Un. The regime focuses on asymmetric warfare, including cyber attacks, due to limited resources and sanctions, aiming to gain strategic advantages without high costs.

• Defectors like Jong reveal the personal struggles faced by North Korean hackers. They work under strict quotas and propaganda sessions, with severe consequences for non-compliance. Despite their skills, they live under constant pressure, with most earnings going to the regime, leading to disillusionment and eventual defection.