This article is from the source 'bbc' and was first published or seen on . It last changed over 40 days ago and won't be checked again for changes.
You can find the current article at its original source at http://www.bbc.co.uk/news/technology-32925503
The article has changed 2 times. There is an RSS feed of changes available.
Previous version
1
Next version
Version 0 | Version 1 |
---|---|
Bureau 121: How good are Kim Jong-un's elite hackers? | Bureau 121: How good are Kim Jong-un's elite hackers? |
(3 days later) | |
In the Moonshin-dong area of North Korean capital Pyongyang, near the weaving Taedong River, is where researchers believe Bureau 121's headquarters can be found. | In the Moonshin-dong area of North Korean capital Pyongyang, near the weaving Taedong River, is where researchers believe Bureau 121's headquarters can be found. |
Understood to be Pyongyang's cyber-attack elite unit, Bureau 121 is staffed by the best and brightest - although its exact size is not known. | Understood to be Pyongyang's cyber-attack elite unit, Bureau 121 is staffed by the best and brightest - although its exact size is not known. |
But in an isolated nation with dismally poor infrastructure, cyber operations are almost certainly orchestrated from outside the country. | But in an isolated nation with dismally poor infrastructure, cyber operations are almost certainly orchestrated from outside the country. |
Just over the border into China is where researchers think a key Bureau 121 outpost can be found, in Shenyang, the capital of Liaoning Province. | Just over the border into China is where researchers think a key Bureau 121 outpost can be found, in Shenyang, the capital of Liaoning Province. |
Remarkable analysis from computer firm HP pinpointed attacks emanating from the basement of a restaurant - attached to a hotel - described by one enthusiastic reviewer on Trip Advisor as being "immaculately clean with tasteful touches of North Korean tapestries and pillows". | Remarkable analysis from computer firm HP pinpointed attacks emanating from the basement of a restaurant - attached to a hotel - described by one enthusiastic reviewer on Trip Advisor as being "immaculately clean with tasteful touches of North Korean tapestries and pillows". |
As you might expect, another said it had "great internet". | As you might expect, another said it had "great internet". |
Digital paper trail | Digital paper trail |
Evidence of what exactly North Korean hackers have done - or could do - is extremely hard to come by. | Evidence of what exactly North Korean hackers have done - or could do - is extremely hard to come by. |
Researchers have to rely on analysing digital paper trails to determine patterns of behaviour. Bureau 121, for instance, is said to routinely use a particularly recognisable strand of malicious code designed to cover its tracks. | Researchers have to rely on analysing digital paper trails to determine patterns of behaviour. Bureau 121, for instance, is said to routinely use a particularly recognisable strand of malicious code designed to cover its tracks. |
But several researchers have cast doubt on some of the accusations pointed at Pyongyang. None more so than the hack on Sony Pictures last year, which US intelligence aimed squarely at North Korea, but which Pyongyang denies and others have said could easily have been carried out by another sophisticated group simply emulating Bureau 121's style. | But several researchers have cast doubt on some of the accusations pointed at Pyongyang. None more so than the hack on Sony Pictures last year, which US intelligence aimed squarely at North Korea, but which Pyongyang denies and others have said could easily have been carried out by another sophisticated group simply emulating Bureau 121's style. |
Digital sleuthing aside, talking to well-connected defectors provides revealing insight. | Digital sleuthing aside, talking to well-connected defectors provides revealing insight. |
I met Prof Kim Heung-Kwang near his office just outside Seoul. | I met Prof Kim Heung-Kwang near his office just outside Seoul. |
He gave several Bureau 121 members their first taste of computer science while teaching at Hamheung Computer Technology University - designed to bring computing expertise directly into the North Korean military. | He gave several Bureau 121 members their first taste of computer science while teaching at Hamheung Computer Technology University - designed to bring computing expertise directly into the North Korean military. |
Prof Kim told us that in his 23 years there, while he didn't teach hacking techniques, he gave the students knowledge of the ins and outs of computing, networks and data transfer. | Prof Kim told us that in his 23 years there, while he didn't teach hacking techniques, he gave the students knowledge of the ins and outs of computing, networks and data transfer. |
The very best students were later plucked from his course by the military and given further, more specialist training in cyber security. The hackers-in-waiting would usually be sent to China, or in some cases to Japan or Europe. | The very best students were later plucked from his course by the military and given further, more specialist training in cyber security. The hackers-in-waiting would usually be sent to China, or in some cases to Japan or Europe. |
Those selected to join the unit live privileged lives in North Korea, as do their families. | Those selected to join the unit live privileged lives in North Korea, as do their families. |
Read more stories from the South Korea Direct season of features: | |
The woman who liberated Korean housewives | |
In Pictures: Fish, fruit and veg in South Korea's markets | |
Life at the world's largest shipyard | |
Prof Kim told the BBC he feels saddened that some of the great, "bright" minds he nurtured had their potential channelled "not into improving our internet culture, but to terrorise other people using the internet". | Prof Kim told the BBC he feels saddened that some of the great, "bright" minds he nurtured had their potential channelled "not into improving our internet culture, but to terrorise other people using the internet". |
But he conceded that his former students probably enjoyed their task, and took pride in "accomplishing Kim Jong-un's orders as a cyber warrior". | But he conceded that his former students probably enjoyed their task, and took pride in "accomplishing Kim Jong-un's orders as a cyber warrior". |
South Korean targets | South Korean targets |
So who are those targets? | So who are those targets? |
While questions remain over who was behind last year's Sony Pictures hack, an earlier hack in 2013 points more strongly to North Korea. Three South Korean broadcasters, and a bank, suffered from a complete seizing up of their computers, locking out employees. According to the Wall Street Journal, the hackers had help from a high-ranking technology executive based in the South. | While questions remain over who was behind last year's Sony Pictures hack, an earlier hack in 2013 points more strongly to North Korea. Three South Korean broadcasters, and a bank, suffered from a complete seizing up of their computers, locking out employees. According to the Wall Street Journal, the hackers had help from a high-ranking technology executive based in the South. |
Analysis of the attack revealed a strand of malicious code since dubbed DarkSeoul. A similar technique was observed when researchers investigated the Sony Pictures hack just over a year later. | Analysis of the attack revealed a strand of malicious code since dubbed DarkSeoul. A similar technique was observed when researchers investigated the Sony Pictures hack just over a year later. |
Earlier this year, South Korea's Hydro & Nuclear Power Company suffered a mass data breach, with hackers demanding money to prevent further leaks. South Korea again pointed the finger at Pyongyang, although others noted that asking for a ransom wasn't typical of North Korea's approach in other attributed attacks. | Earlier this year, South Korea's Hydro & Nuclear Power Company suffered a mass data breach, with hackers demanding money to prevent further leaks. South Korea again pointed the finger at Pyongyang, although others noted that asking for a ransom wasn't typical of North Korea's approach in other attributed attacks. |
Prof Kim told me that Bureau 121 is looking to emulate Stuxnet, an attack on Iran, reportedly originating from the US and Israel, that was successful in damaging nuclear centrifuges. | Prof Kim told me that Bureau 121 is looking to emulate Stuxnet, an attack on Iran, reportedly originating from the US and Israel, that was successful in damaging nuclear centrifuges. |
Doing so would be a major escalation in North Korea's capability - moving from attacking computer networks to instead harming infrastructure. | Doing so would be a major escalation in North Korea's capability - moving from attacking computer networks to instead harming infrastructure. |
Mobile hack | Mobile hack |
But it's not just the state doing the hacking in North Korea. | But it's not just the state doing the hacking in North Korea. |
In the West we like to think of the country as wrapped up in its own delusion, spurred on by often comical images of leader Kim Jong-un smiling and pointing in situations which, on the face of it, seem primitive. | In the West we like to think of the country as wrapped up in its own delusion, spurred on by often comical images of leader Kim Jong-un smiling and pointing in situations which, on the face of it, seem primitive. |
This mockery is most evident when it comes to technology, thanks in part to widely circulated pictures of Kim Jong-un looking at laughably huge boxes of computer equipment. | This mockery is most evident when it comes to technology, thanks in part to widely circulated pictures of Kim Jong-un looking at laughably huge boxes of computer equipment. |
But that's not to say the country is completely isolated. While in South Korea recently, our driver - who I'll not name to protect the safety of his family still in North Korea - received a brief call from over the border. | But that's not to say the country is completely isolated. While in South Korea recently, our driver - who I'll not name to protect the safety of his family still in North Korea - received a brief call from over the border. |
The woman on the line gave us an update on the situation there. The trains where she lived were working, she was pleased to report, but the same couldn't be said about her home's heating. | The woman on the line gave us an update on the situation there. The trains where she lived were working, she was pleased to report, but the same couldn't be said about her home's heating. |
What was interesting about the call was the ingenuity with which it was made. | What was interesting about the call was the ingenuity with which it was made. |
There is a mobile network in North Korea, called Koryolink, run by an Egyptian telecoms firm. But, crucially, it is locked down - you can only call others in the same country. | There is a mobile network in North Korea, called Koryolink, run by an Egyptian telecoms firm. But, crucially, it is locked down - you can only call others in the same country. |
Near the border with China, however, smuggled phones provide a way out. Chinese mobile networks leak a few miles into North Korea, allowing international calls to be made. | Near the border with China, however, smuggled phones provide a way out. Chinese mobile networks leak a few miles into North Korea, allowing international calls to be made. |
But that doesn't help those far from the borders - and so people on the borders have begun, for a fee, taking calls via the North Korean network from those deeper in the country - and then patching an international call together by holding the Korean phone up against the Chinese one. | But that doesn't help those far from the borders - and so people on the borders have begun, for a fee, taking calls via the North Korean network from those deeper in the country - and then patching an international call together by holding the Korean phone up against the Chinese one. |
A great hack, in the purest sense, and one Kim Jong-un can't do a great deal about. | A great hack, in the purest sense, and one Kim Jong-un can't do a great deal about. |
Follow Dave Lee on Twitter @DaveLeeBBC | Follow Dave Lee on Twitter @DaveLeeBBC |
Previous version
1
Next version