Cyber attack suspected in North Korean internet outage
Investigators said North Korea’s internet was breached during the second wave of cyberattacks. Reuters reported:.
UK-based cybersecurity researcher Junade Ali told Reuters that all internet traffic to and from North Korea was shut down during the height of the outage.
The cyberattack took place at 6am on Wednesday and came a day after the country launched its fifth missile test this month, according to Reuters.
“If someone tried to connect to an IP address in North Korea, the internet would literally be unable to route their data into the country,” Ali said.
After the outage was over, institutions such as airline Air Koryo, the country’s foreign ministry and official government portal Naenara were still experiencing stress and downtime from the attack, Reuters reported.
Internet access is strictly limited in North Korea, as it is estimated to be one percent of the population of 25 million.
Seoul-based NK Pro reported that log and network files showed the country’s web domains were unreachable because the Domain Name System (DNS) stopped communicating the routes data packets should take.
“It’s normal for one server to go offline for a period of time, but these incidents have caused all web properties to go offline at the same time,” Ali said. “It’s not common for their entire internet to go offline.”
NK Pro also reported that a similar incident occurred on Jan. 14, Reuters noted.