The Role of Cyber in Kim Jong Un's Byungjin Line: North Korea's Political Culture, Hackers, and Maritime Tactics

김정은의 병진노선에서 사이버의 역할: 북한의 정치문화, 해커, 해양전술

  • Received : 2021.09.16
  • Accepted : 2021.11.25
  • Published : 2021.12.30

Abstract

North Korea's cyber capabilities represent a relatively new threat to global financial institutions and foreign governments, particularly the U.S and South Korean governments. Based primarily on publicly available sources, such as journalistic accounts and scholarly publications, this qualitative paper analyzes the ways in which North Korean leader Kim Jong Un has bolstered his country's asymmetric power and advanced his line of byungjin (dual development in the economy and military). Particularly by merging the cyber and maritime domains, North Korean operatives generate more revenue for the regime and helps keep the heavily sanctioned leadership in power. Despite the increased international attention to North Korean hackers, few analysts have examined the important role of cyber in the DPRK's internal political culture, specifically in advancing Kim Jong Un's byungjin line. Cyber fits into the DPRK's longstanding tradition of irregular warfare and guerilla-based armed struggle. Cyber also further advances Kim's personal reputation in the DPRK as an economic innovator and military strategist. This paper pays particular attention to the role of the DPRK's cyber operations in both ideological and maritime contexts. Recently, North Korean hackers have targeted South Korean shipbuilding industries and developed a blockchain scam, known as Marine Chain. North Korean cyber agents have increasingly paid attention to the nexus of cyber and maritime domains in their activities.

북한의 사이버 능력은 세계 금융기관 및 외국정부(특히 미국정부, 한국정부)들에 비교적 새로운 위협이 되고 있다. 본 정성 논문에서는, 언론 기사, 학술 출간물과 같은 공개 원천들을 주로 이용하여, 북한 지도자 김정은이 자국의 비대칭 전력을 강화하고 병진노선(경제와 군사력의 동시 발전)을 진전시키는 방식을 분석한다. 특히 북한 공작원들은 사이버 분야와 해양 분야를 통합함으로써 체제에 더 많은 수익을 창출하고 있으며, 심한 제제에도 불구하고 북한 지도부가 권력을 유지하는 데에도 기여한다. 북한 해커들에 관한 국제적 관심이 높아졌지만, 북한의 국제정치 문화에서 사이버의 중요한 역할을 조사한 분석가는 거의 없으며, 특히 김정은의 병진노선 진전 부문에 있어서는 더 그렇다. 사이버는, 오래전부터 존재해 온 북한의 비정규전 및 게릴라 기반 무장투쟁 전통에 잘 맞아떨어진다. 또한, 사이버는 경제 혁신가 및 군사 전략가로서의 김정은의 북한 내 개인의 명성 역시 높인다. 본 논문은 이데올로기 맥락 및 해양 맥락에서 북한 사이버 작전의 역할에 초점을 맞춘다. 북한 해커들은 한국 조선산업을 타깃으로 해왔으며, '해양 체인(Marine Chain)'이라는 블록체인 사기도 개발했다. 북한 사이버 첩보원들은 활동에서 사이버 분야와 해양 분야의 연계에 점점 더 초점을 맞춰왔다.

Keywords

References

  1. Associated Press, "Kim Jong Un inspects new submarine, wants North Korea's military bolstered," Associated Press, 23 July 2019, https://www.nbcnews.com/news/world/kim-jong-un-inspects-new-submarine-wants-north-korea-s-n1032711.
  2. Bartlett, Jason, "Why Is North Korea So Good at Cybercrime?" The Diplomat, 13 November 2020. https://thediplomat.com/2020/11/why-is-north-korea-so-good-at-cybercrime/.
  3. Bartlett, Jason, "Exposing the Financial Footprints of North Korea's Hackers," CNAS, 18 November 2020, https://www.cnas.org/publications/reports/exposing-the-financial-footprints-of-north-koreas-hackers; "Report of the Panel of Exports Established Pursuant to Resolution 1874 (2009)" (S/2020/840).
  4. Buzo, Adrian, The Guerilla Dynasty: Politics and Leadership in North Korea, New York: Routledge, 2018.
  5. Brewster, Thomas, "North Korean Hackers Accused Of 'Biggest Cryptocurrency Theft Of 2020'-Their Heists Are Now Worth $1.75 Billion," Forbes, 9 February 2021, https://www.forbes.com/sites/thomasbrewster/2021/02/09/north-korean-hackers-accused-of-biggest-cryptocurrency-theft-of-2020-their-heists-are-now-worth-175-billion/?sh=412fa5d75b0b.
  6. Byun, Duk-Kun, "Pompeo says N. Korea a greater threat than Russia in cyber security," Yonhap, 15 December 2020, https://en.yna.co.kr/view/AEN20201215000200325.
  7. Chainanalysis, "Lazarus Group Pulled Off 2020's Biggest Exchange Hack and Appears to be Exploring New Money Laundering Options," Chainalysis, 9 February 2021, https://blog.chainalysis.com/reports/lazarus-group-kucoin-exchange-hack.
  8. Choi, Haejin, "North Korea hacked Daewoo Shipbuilding, took warship blueprints: South Korea lawmaker," Reuters, 13 October 2017, https://www.reuters.com/article/us-northkorea-missiles-cybercrime/north-korea-hacked-daewoo-shipbuilding-took-warship-blueprints-southkorea-lawmaker-idUSKBN1D00EX.
  9. Choe, Sang-hun, "North Korean Leader Stresses Need for Strong Military," The New York Times, 15 April 2012, https://www.nytimes.com/2012/04/16/world/asia/kim-jong-un-north-korean-leader-talks-of-military-superiority-in-first-public-speech.html.
  10. CISO MAG, "North Korea hacked Daewoo Shipbuilding, took warship blueprints: South Korea lawmaker," CISO MAG, 1 November 2017, https://cisomag.eccouncil.org/north-korea-hacked-daewooshipbuilding-took-warship-blueprints-south-korea-lawmaker/.
  11. De, Nikhilesh, "DOJ Charges 3 North Korean Hackers With Stealing $100M+ From Crypto Firms," Coindesk.com, February 17, 2021, https://www.coindesk.com/doj-charges-3-north-korean-hackers-with-stealing-100m-from-crypto-exchanges.
  12. Geller, Eric, "North Korean hackers are 'the world's leading bank robbers,' U.S. charges," POLITICO, February 17, 2021, https://www.politico.com/news/2021/02/17/us-charges-north-korean-hackers-wannacry-sony-469406.
  13. Hellenic Shipping News, "Daewoo Shipbuilding & Marine Engineering Exposed to North Korean Hacking Attacks," Hellenic Shipping News, 23 June 2021, https://www.hellenicshippingnews.com/daewoo-shipbuilding-marine-engineering-exposed-to-north-korean-hacking-attacks/.
  14. Hodge, Nathan, "Putin 'pleased' with Kim summit, and will inform US on talks," CNN, 25 April 2019, https://www.cnn.com/asia/live-news/kim-jong-un-vladimir-putin-summit-intl/index.html.
  15. Hung, Chang-tai, Mao's New World: Political Culture in the Early People's Republic, Ithaca and London: Cornell University Press, 2011.
  16. Insikt Group, "Shifting Patterns in Internet Use Reveal Adaptable and Innovative North Korean Ruling Elite," Recorded Future, 25 October 2018, https://www.recordedfuture.com/north-korea-internet-usage/.
  17. Jeong, Gu-Yeon and Ki-Tae Lee, "Kwahakkisulbalchon'gwa puk'anui saeroun wihyop: saibo wihyopkwa muin'gi ch'imt'u," Korea Institute for National Unification Research Series (April 2016).
  18. Joo, Jeong Tae, "N. Korean soldiers study Kim Il Sung-style guerrilla warfare," Daily NK, 3 January 2020, https://www.dailynk.com/english/n-korean-soldiers-study-kim-il-sung-style-guerrilla-warfare/.
  19. Jun, Jenny, Scott LaFoy, and Ethan Sohn, "North Korea's Cyber Operations: Strategy and Responses," CSIS Special Report, December 2015, https://www.csis.org/analysis/north-korea%E2%80%99s-cyber-operations.
  20. Koettl, Christopher, "How Illicit Oil Is Smuggled Into North Korea With China's Help," New York Times, 24 March 2021, https://www.nytimes.com/2021/03/24/world/asia/tankers-north-korea-china.html.
  21. Kong, Ji-Young, Lim Jong In and Kim Kyoung Gon, "The All-Purpose Sword: North Korea's Cyber Operations and Strategies," 11th International Conference on Cyber Conflict (CyCon), 2019, https://ieeexplore.ieee.org/document/8756954?signout=success.
  22. Lankov, Andrei, "Is Byungjin Policy Failing? Kim Jong Un's Unannounced Reform and its Chances of Success," Korean Journal of Defense Analysis Vol. 29, No. 1 (2017), 25-45. https://doi.org/10.22883/KJDA.2017.29.1.002
  23. Larsen, Morten Soendergaard, "While North Korean Missiles Sit in Storage, Their Hackers Go Rampant," Foreign Policy, 15 March 2021, https://foreignpolicy.com/2021/03/15/north-korea-missiles-cyberattack-hacker-armies-crime/.
  24. Lee, Jeong-ho, "North Korean trade with biggest partner China dives 48 per cent amid sanctions," South China Morning Post, 19 July 2019, https://www.scmp.com/news/china/diplomacy/article/3019348/north-korean-trade-biggest-partner-china-dives-48-cent-amid.
  25. Leyden, John, "Beyond Lazarus: North Korean cyber-threat groups become top-tier, 'reckless' adversaries," The Daily Swig, 12 May 2021, https://portswigger.net/daily-swig/beyond-lazarus-north-korean-cyber-threat-groups-become-top-tier-reckless-adversaries.
  26. Mangan, Dan. "North Korean hackers charged in massive cryptocurrency theft scheme," CNBC, 17 February 2021, https://www.cnbc.com/2021/02/17/north-korean-hackers-charged-in-massive-cryptocurrency-theft-scheme.html.
  27. Maza, Cristina, "North Korea Regime Is Making Money From Cryptocurrency Scam That Offered Users Ownership of Ships: Report," Newsweek, October 25, 2018, https://www.newsweek.com/north-korea-cryptocurrency-scam-kim-jong-un-1188020.
  28. McMillan, Robert and Aruna Viswanatha, "North Korea Turning to Cryptocurrency Schemes in Global Heists, U.S. Says," Wall Street Journal, 17 February 2021, https://www.wsj.com/articles/u-s-authorities-charge-north-koreans-in-long-running-hacking-scheme-11613581358.
  29. Miller, Steve, "Where Did North Korea's Cyber Army Come From?," VOA, 20 November 2018, https://www.voanews.com/east-asia-pacific/where-did-north-koreas-cyber-army-come.
  30. Nazario, Jose, "Politically Motivated Denial of Service Attacks," in The Virtual Battlefield: Perspectives on Cyber Warfare, edited by Christian Czosseck and Kenneth Geers, Washington, D.C: IOS Press, 2010.
  31. Park, Donghui, "North Korea Cyber Attacks: A New Asymmetrical Military Strategy," The Henry M. Jackson School of International Studies Blog, University of Washington Report, 28 June 2016, https://jsis.washington.edu/news/north-korea-cyber-attacks-new-asymmetrical-military-strategy/.
  32. Reuters, "Senior U.S. official accuses China of aiding North Korea cyber thefts," Reuters, 22 October 2020, https://www.reuters.com/article/us-usa-northkorea-china/senior-u-s-official-accuses-china-of-aiding-north-korea-cyber-thefts-idUSKBN2772RX.
  33. Riley, Tonya, "The Cybersecurity 202: Investigations into Russian, North Korean hackers are shaping Biden's foreign policy," The Washington Post, 18 February 2021, https://www.washingtonpost.com/politics/2021/02/18/cybersecurity-202-investigations-into-russian-north-korean-hackers-are-shaping-biden-foreign-policy-anne-neuberger-cybersecurity-biden-administration-cybersecurity/.
  34. Ripley, Will, "North Korean defector: 'Bureau 121' hackers operating in China," CNN, 7 January 2015, https://edition.cnn.com/2015/01/06/asia/north-korea-hackers-shenyang/index.html.
  35. Roth, Richard and Joshua Berlinger, "North Korean hackers stole more than $300 million to pay for nuclear weapons, says confidential UN report," CNN, 9 February 2021, https://www.cnn.com/2021/02/08/asia/north-korea-united-nations-report-intl-hnk/index.html.
  36. Shin, Chang-Hoon, "Puk'anui saibo konggyokkwa wihyobe taehan uriui taeung 2014nyon 11wol SONY sagonui kyohun," Asan Research Institute Research Brief (6 April 2015).
  37. Snyder, Scott A., "The Motivations Behind North Korea's Pursuit of Simultaneous Economic and Nuclear Development," Council on Foreign Relations Blog, 20 November 2013, https://www.cfr.org/blog/motivations-behind-north-koreas-pursuit-simultaneous-economic-and-nuclear-development.
  38. Strnad, Grazyna, "Is North Korea's Byungjin Policy in Crisis?," The National Interest, 27 June 2021, https://nationalinterest.org/blog/korea-watch/north-korea%E2%80%99s-byungjin-policy-crisis-188649.
  39. Tan, Er-Win, "Byungjin and the Sources of Pyongyang's Paranoia," International Journal of Korean Unification Studies Vol. 28, No. 2 (2019), 97-128. https://doi.org/10.33728/ijkus.2019.28.2.004
  40. Tarakanov, Dmitry, "Kimsuky APT: Operation's possible North Korean links uncovered," SecureList By Kaspersky, September 11, 2013, https://securelist.com/kimsuky-apt-operations-possible-north-korean-links-uncovered/57335/.
  41. The Guardian, "China and North Korea hail 'immortal and invincible' friendship," The Guardian, 6 October 2019, https://www.theguardian.com/world/2019/oct/06/china-and-north-korea-hail-immortal-and-invincible-friendship.
  42. The Guardian, "Kim Jong-un calls US 'biggest enemy' and says nuclear submarine plans 'complete'," The Guardian, 8 January 2021, https://www.theguardian.com/world/2021/jan/09/kim-jong-un-calls-us-biggest-enemy-and-says-nuclear-submarine-plans-complete.
  43. The Japan Times, "Shadowy North Korean IT group believed hiding out in Russian Far East: sources," The Japan Times, 18 February 2018, https://www.japantimes.co.jp/news/2018/02/18/world/politics-diplomacy-world/shadowy-north-korean-group-believed-hiding-russian-far-east-sources/.
  44. The Maritime Executive, "South Korea Probes Possible Hack of DSME Computers," The Maritime Executive, 21 June 2021, https://www.maritime-executive.com/article/south-korea-probes-possible-hack-of-dsme-computers.
  45. The US Department of Justice, "Three North Korean Military Hackers Indicted in Wide-Ranging Scheme to Commit Cyberattacks and Financial Crimes Across the Globe," 17 February 2021, https://www.justice.gov/opa/pr/three-north-korean-military-hackers-indicted-wide-ranging-scheme-commit-cyberattacks-and
  46. United Nations, "United Nations Report of the Panel of Experts established pursuant to resolution 1874, 30 August 2019," https://undocs.org/S/2019/691.
  47. Van Der Werff Emily and Timothy B. Lee, "The 2014 Sony hacks, explained," Vox, 3 June 2015, https://www.vox.com/2015/1/20/18089084/sony-hack-north-korea.
  48. Wada, Haruki, Kim Il Sung gwa Manju Hangil Chonjaeng, Seoul: Changbi, 1992.
  49. Ward, Alex, "Kim Jong Un made a surprise visit to China. It's mostly about Trump," Vox, 9 January 2019, https://www.vox.com/2019/1/8/18173792/north-korea-kim-trump-china-nuclear.
  50. Williams, Martyn, "Russia Provides New Internet Connection to North Korea," 38 North, 1 October 2017, https://www.38north.org/2017/10/mwilliams100117/.
  51. Yun, Wan-Jun and Dong-Yeon Jung, "North Korean hackers withdraw from their hub in Shenyang," Dong-A Ilbo, 11 January 2018, https://www.donga.com/en/article/all/20180111/1186969/1/North-Korean-hackers-withdraw-from-their-hub-in-Shenyang.