Country
country:north_korea
Also: DPRK, Democratic People’s Republic of Korea, North Korean, North Korean government
Country described in connection with a state-sponsored campaign against Lineage game servers.
Country described in connection with a state-sponsored campaign against Lineage game servers.
“hackers that were sponsored by North Korea”
A country used in the opening espionage analogy involving a covert British mission.
“Bond snuck into North Korea undetected”
Country identified by James Clapper as responsible for a destructive attack against Sony.
“These destructive attacks demonstrate that Iran and North Korea are motivated and unpredictable cyber-actors.”
Country described as having severe restrictions on internet access, foreign media, computing, and information exchange.
“People of North Korea cannot access the internet; no e-mails, YouTube, no podcasts, no news.”
Country whose government is attributed in the episode with supporting the Bangladesh Bank heist and related cybercrime operations.
“it turns out it was the North Korean government”
“evidence that clearly demonstrates that the North Korean subjects, backed by their government, were responsible”
Country identified by the DOJ attribution and discussed as the state associated with the Lazarus Group and Bureau 121.
“North Korea did this.”
Country considered a suspect because of its history of attacks against South Korea and code similarities associated with Lazarus.
“this was probably North Korea”
“the North Korean group called Lazarus”
Country described as using cyber capabilities for bank theft, ransomware, and collecting or interfering with missile-related information.
“North Korea uses these cyber-capabilities to make money by robbing banks and launching ransomware”
Country described in the episode as the alleged sponsor or beneficiary of Lazarus Group activity and cryptocurrency theft.
“believed to be working on behalf of the North Korean government”
“North Korea has denied any connections to any of these hacks at all”
Country whose government is identified in a UN report as responsible for bank robberies, including a reported robbery in Kuwait.
“this UN investigation report says the government of North Korea is responsible for robbing banks”
Country identified in the attribution of the Axie Infinity cryptocurrency theft.
“the government of North Korea”
Country mentioned in connection with a suspected attempt to place a worker in a company to steal cryptocurrency.
“someone from North Korea tried applying for a job”
Country alleged by the episode to be behind the Axie Infinity theft and other cryptocurrency thefts; the allegation is denied by North Korea.
“the name that pops into the frame is North Korea.”
“North Korea denies these allegations”
Country whose government is presented as the suspected or later-attributed source of WannaCry.
“it was someone working on behalf of the North Korean government”
“they all came out and they pointed the finger at North Korea”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | SAME_AS | Democratic People’s Republic of Korea | Explicit | 71 |
| outgoing | ASSOCIATED_WITH | government information monopoly | Explicit | 71 |
| incoming | ATTRIBUTED_TO | Lineage server hacking campaign | Attributed | 8 |
| incoming | ATTRIBUTED_TO | Sony cyber-attack | Attributed | 37 |
| incoming | TARGETS | Flash Drives for Freedom | Explicit | 71 |
| incoming | ATTRIBUTED_TO | North Korean hacker groups | Explicit | 71 |
| incoming | ATTRIBUTED_TO | Bangladesh Bank heist | Attributed | 72 |
| incoming | ASSOCIATED_WITH | Lazarus Group | Explicit | 72 |
| incoming | ASSOCIATED_WITH | Lazarus Group | Uncertain | 119 |
| incoming | ATTRIBUTED_TO | WannaCry | Attributed | 73 |
| incoming | ATTRIBUTED_TO | WannaCry | Attributed | 158 |
| incoming | ATTRIBUTED_TO | Marine Chain ICO | Explicit | 119 |
| incoming | ASSOCIATED_WITH | Kim Il | Attributed | 119 |
| incoming | ASSOCIATED_WITH | John Wu | Uncertain | 133 |
| incoming | ATTRIBUTED_TO | Axie Infinity | Uncertain | 147 |
| incoming | ASSOCIATED_WITH | Tornado Cash | Uncertain | 147 |
Lineage server hacking campaign ATTRIBUTED_TO North Korea
The New York Times report attributed the Lineage server hackers to North Korea sponsorship, reportedly to raise money for North Korea.
Attributed Confidence 97% · Jack Rhysider EP 8 Details
“the New York Times reported hackers that were sponsored by North Korea and Kim Jong-Il”
Sony cyber-attack ATTRIBUTED_TO North Korea
James Clapper identifies a North Korean attack against Sony in November 2014.
Attributed Confidence 98% · James Clapper EP 37 Details
“and a North Korean attack against Sony in November”
North Korea SAME_AS Democratic People’s Republic of Korea
Jack identifies the Democratic People’s Republic of Korea (DPRK) as the country established in North Korea in 1948.
Explicit Confidence 98% · Jack Rhysider EP 71 Details
“in 1948, they established the Democratic People’s Republic of Korea, DPRK”
North Korea ASSOCIATED_WITH government information monopoly
Alex says the North Korean government's power depends on maintaining an information monopoly.
Explicit Confidence 98% · Alex Gladstein EP 71 Details
“their entire architecture of power relies on having an information monopoly”
Flash Drives for Freedom TARGETS North Korea
The campaign is intended to get information to people inside North Korea and influence their understanding of the outside world.
Explicit Confidence 99% · Alex Gladstein EP 71 Details
“Why don’t we try to help the people in North Korea?”
North Korean hacker groups ATTRIBUTED_TO North Korea
The episode attributes the hacking activity of these groups to North Korea and its government.
Explicit Confidence 98% · Yeonmi Park EP 71 Details
“North Korea does not just only have a nuclear weapons to threat other countries, but they have a strong army of hackers”
Bangladesh Bank heist ATTRIBUTED_TO North Korea
The US Department of Justice alleged that the conspiracy behind the Bangladesh Bank heist acted on behalf of the North Korean government.
Attributed Confidence 98% · Doj EP 72 Details
“a conspiracy that conducted sophisticated cyber-attacks around the world on behalf of the North Korean government”
Lazarus Group ASSOCIATED_WITH North Korea
Lazarus Group is described as a North Korean hacking group; the episode links it to the North Korean government.
Explicit Confidence 98% · Jack Rhysider EP 72 Details
“this North Korean hacking group the Lazarus Group”
WannaCry ATTRIBUTED_TO North Korea
The U.S. Department of Justice attributed the broader cyber-attack conspiracy, including WannaCry, to actors operating on behalf of the North Korean government.
Attributed Confidence 97% · Doj EP 73 Details
“a conspiracy that conducted sophisticated cyber-attacks around the world on behalf of the North Korean government”
Lazarus Group ASSOCIATED_WITH North Korea
The Lazarus Group is described as believed to be working on behalf of the North Korean government.
Uncertain Confidence 94% · Geoff White EP 119 Details
“believed to be working on behalf of the North Korean government”
Marine Chain ICO ATTRIBUTED_TO North Korea
The Marine Chain ICO is described as a North Korean front operation, although the account is based on later investigation and reporting.
Explicit Confidence 96% · Geoff White EP 119 Details
“it does turn out to be a North Korean front operation”
Kim Il ASSOCIATED_WITH North Korea
According to the US government, Kim Il was an operative of the North Korean government.
Attributed Confidence 95% · Geoff White EP 119 Details
“was actually Kim Il, an operative of the North Korean government”
John Wu ASSOCIATED_WITH North Korea
Jack says John Wu believed that someone from North Korea may have applied for a job in order to steal cryptocurrency; this is presented as a possibility, not a confirmed attribution.
Uncertain Confidence 82% · Jack Rhysider EP 133 Details
“he thinks that someone from North Korea tried applying for a job”
Axie Infinity ATTRIBUTED_TO North Korea
The Axie Infinity hack was attributed to North Korea, but Geoff explicitly presents this as an allegation and North Korea denies involvement.
Uncertain Confidence 93% · Geoff White EP 147 Details
“very quickly, the name that pops into the frame is North Korea”
“these are allegations. North Korea denies these allegations”
Tornado Cash ASSOCIATED_WITH North Korea
The US government claimed or believed that Tornado Cash was working for North Korea; this was presented as an allegation rather than an established fact.
Uncertain Confidence 90% · Geoff White EP 147 Details
“this mixer, this Tornado Cash mixer, is working for the North Koreans, we believe, we claim”
WannaCry ATTRIBUTED_TO North Korea
WannaCry is attributed to someone working on behalf of the North Korean government; later, intelligence services publicly pointed to North Korea.
Attributed Confidence 96% · Malwaretech EP 158 Details
“I think the consensus is that it was someone working on behalf of the North Korean government.”
“the NSA and GCHQ and I think the Australian intelligence services, they all came out and they pointed the finger at North Korea”