Archive for the ‘Computing/IT’ Category

Malicious email update

Friday, January 27th, 2012

I received another example of the malicious emails that appear in the mail boxes of North Korea researchers. Always be on the lookout for these attempts to hack into your computer:

From: Ben Watkins [mailto:ben.watkins2@aol.com]
Sent: 26 January 2012 08:15
To: [DELETED]
Subject: FW:NKorea,contacts with Iran related to nuclear program in secret

North Korea, contacts with Iran related to nuclear program in secret
January 26, 2011 5:29AM, EST
FULL STORY

© 2012 Daily Cable News Network, LP, LLLP.
All Rights Reserved.
Terms under which this service is provided to you.
Read our privacy guidelines. Contact us.

ATTACHMENTS: image001.jpg

The areas in bold link to a shady server: Xttp://online.newssupply.net/newsviewer.hta.  I changed the “h” in “http” to an “X” to prevent accidentally linking.

You can read more background on these attacks here, here, here, here, and here.

Share

Uriminzokkiri using social networking to spread DPRK propaganda

Monday, November 14th, 2011

Pictured above is a screen shot from the Uriminzokkiri web page featuring the social networking buttons

According to Yonhap:

North Korea’s government-run Web site began linking posts critical of South Korea to popular social networking sites (SNS) to allow netizens to more easily spread its message online, in its latest effort to step up cyber propaganda.

The official Web site of the Committee for the Peaceful Reunification, Uriminzokkiri, on Monday inserted six SNS icons, including Twitter, Facebook and Korean micro-blogging services, in two postings critical of the South Korean government, according to Yonhap’s monitoring team on North Korea.

Other articles on the site, however, did not include the icons, showing the North’s apparent intention to drive more traffic to specific Web sites when it comes to stories critical of Seoul, the analysis noted.

South Korean authorities ban Web sites containing communist information, illegal under the National Security Law, but some people take advantage of proxy servers to gain access to the blocked sites in the communist state, raising concern that such a bypass will be abused to promote the Pyongyang regime.

Uriminzokkiri (“on our own” in Korean), which opened a Twitter account in August of last year, posts 5-10 messages daily, with 10,000 followers across the world. The propaganda mouthpiece also created its own channel on Youtube, putting up over 1,800 video clips of performances and events by North Korean military and art troupes.

In January of this year, hackers were able to break into Uriminzokkiri’s Twitter and YouTube accounts.

Read the full story here:
N. Korea’s propaganda Web site adds links to SNS sites
Yonhap
Kim Eun-jung
2011-11-14

Share

Apple iPads spotted in Pyongyang

Monday, November 7th, 2011

Pictured above (Google Earth): Changwang street runs north from the Pyongyang Central Train Station to the Potonggang Gate–straight through the Workers’ Party Leadership Compound (AKA the “Forbidden City”)

According to the Daily NK:

As the use of multimedia devices continues to spread among wealthy kids from the Pyongyang elite keen to ride the ‘Korean Wave’ of South Korean cultural influences, it appears that ownership of an Apple i-Pad tablet computer has now also become one symbol of ‘cool.’

The most common and popular multimedia devices used by younger generations in Pyongyang are still MP4 players and DVD playback devices with USB compatibility, of course; however, on Changgwang St. in the very heart of Pyongyang a few people have recently been witnessed wielding the popular Apple machines.

“Notebook computers are pretty common in Pyongyang,” one Chinese businessman who visits Pyongyang 2 to 3 times a year told Daily NK on the 6th, “But i-Pads are now a symbol of wealth; someone in Pyongyang requested one from me for their child.”

“I also witnessed a person using an i-Pad on Changgwang Street and PSM officers did not stop this, while the user did not seem to care about getting in trouble,” the source went on, adding, “There are many foreigners in that area so they are probably trying to adopt a sophisticated image.”

One Orascom official also previously reported witnessing the use of an i-Pad in Pyongyang. However, it is not possible to use the product’s 3G cellular facility in the city as yet.

In an interview with Radio Free Asia (RFA) on the 8th, an official with the Egyptian company stated, “We are planning to develop a SIM card so that I-pads can be used in North Korea by the end of this year,” explaining “There is a 3G network for cell phones in North Korea, so as long as you insert a SIM card you’ll be able to use it.”

Naturally, the internet is not available to domestic users of phones in North Korea either, while the i-Pad is renowned worldwide for its lack of USB ports, too, much less a DVD drive, so while the elite may be obtaining the devices one way or another, only those lucky enough to live abroad can really use them.

iPods have been popular in the DPRK for some time. More than once have tourists been propositioned to give up their portable music devices.

Read the full story here:
Even i-Pads Are in Pyongyang Now
Daily NK
Park Jun Hyeong
2011-11-07

Share

North Korea on the Cusp of Digital Transformation

Tuesday, November 1st, 2011

The Nautilus Institute has published a new paper by Alexandre Mansurov on the DPRK’s communication and technology sectors.  The press release and a link to the paper are below:

PRESS RELEASE

The DPRK mobile communications industry has crossed the Rubicon, and the North Korean government can no longer roll it back without paying a severe political price. The most the authorities can do now is probably to manage its rapid expansion in such a way that will ensure that the interests of the political regime and state security are taken care of first.

While traditionally, the State Security Department monitored most communications on a daily basis, the implication of this explosion of mobile phone use is that communication in North Korea has transitioned from a panopticon of total control to a voluntary compliance system where the government makes an example of a select group to try and force the rest of the country to stay in line.

Alexandre Y. Mansourov, a Nautilus Institute Senior Associate, comprehensively examines information technology in North Korea. As of 2008 the regime launched a world-class 3G mobile communications service, which gained almost 700,000 users in less than three years of operation, revealing an insatiable demand for more robust and extensive telecommunications services among the North Korean general population.

Download the report here

About the Nautilus Institute: Since its founding in 1992, the Nautilus Institute (www.nautilus.org) has evolved into a thriving public policy think-tank and community resource. The Institute addresses a myriad of critical security and sustainability issues including the United States nuclear policy in Korea and energy, resource and environmental insecurity in Northeast Asia. Over the years, Nautilus has built a reputation for innovative research and analysis of critical global problems and translating ideas into practical solutions, often with high impact.

For more information, contact the Nautilus Institute at nautilus@nautilus.org or at 415 422 5523.

Here is Yonahp coverage of the report.

Share

Some recent DPRK publications (UPDATED)

Monday, October 31st, 2011

“North Korea on the Cusp of Digital Transformation”
Nautilus Institute
Alexandre Mansurov

“North Korea: An Up-and-Coming IT-Outsourcing Destination”
38 North
Paul Tija, GPI Consulting

“NK People Speak, 2011″ (Interviews with North Koreans in China)
Daily NK (PDF)

“The Rise and Fall of Détente on the Korean Peninsula, 1970-1974″
Wilson Center NKIDP
Christian F. Ostermann and James Person
(Coverage of the report in the Donga Ilbo can be found here)

Don’t Expect a Pyongyang Spring Sometime Soon
Center for Strategic and International Studies (via CanKor)
Hazel Smith

Share

KCC finding creative ways to earn hard currency

Thursday, August 4th, 2011

Pictured above (Google Earth): Korea Computer Center

According to the Associated Press (Via Washington Post):

South Korean police said Thursday they have arrested five people who allegedly collaborated with elite North Korean hackers to steal millions of dollars in points from online gaming sites.

The five, including a Chinese man, were arrested and another nine people were booked without physical detainment after they worked with North Koreans to hack South Korean gaming sites, the Seoul Metropolitan Police Agency said in a statement.

Members of the hacking ring, which included North Korea’s technological elite, worked in China and shared profits after they sold programs that allowed users to rack up points without actual play, police said.

The points were later exchanged for cash through sites where players trade items to be used for their avatars. The police said the ring made about $6 million over the last year and a half.

A police investigator, who declined to be identified because the investigation was under way, said North Korean hackers were asked to join the alleged scheme because they were deemed competent and could help skirt national legal boundaries.

The police pointed to North’s Korea Computer Center as the alleged culprit. Set up in 1990, the center has 1,200 experts developing computer software and hardware for North Korea, the police said.

The National Intelligence Service, South Korea’s spy agency, was heavily involved in the investigation, the police said. Investigators suspect the hackers’ so-called “auto programs” could be used as a conduit for North Korean cyberattacks.

South Korean authorities have accused North Korea of mounting cyberattacks in the past few years. Prosecutors said earlier this year that the North hacked into a major South Korean bank’s system and paralyzed it for days. The North is also accused of mounting attacks on U.S. and South Korean websites. Pyongyang has denied the charges.

The New York Times adds the following details:

In a little less than two years, the police said, the organizers made $6 million. They gave 55 percent of it to the hackers, who forwarded some of it to agents in Pyongyang, the capital of North Korea. “They regularly contacted North Korean agents for close consultations,” Chung Kil-hwan, a senior officer at the police agency’s International Crime Investigation Unit, said during a news briefing.

Mr. Chung said the hackers, all graduates of North Korea’s elite science universities, were dispatched from two places: the state-run Korea Computer Center in Pyongyang and the Korea Neungnado General Trading Company. The company, he said, reports to a shadowy Communist Party agency called Office 39, which gathers foreign hard currency for Mr. Kim through drug trafficking, counterfeiting, arms sales and other illicit activities.

Read the full story here:
South Korean police say they’ve cracked down on ring working with North Korean hackers
Associated Press (Via Washington Post)
2011-8-4

Share

Philippines donates to DPRK school

Thursday, July 7th, 2011

Pictured above (Google Earth): Suspected location of Kaeson Middle School (Google Maps)

According to the Philippine Department of Foreign Affairs:

Foreign Affairs Undersecretary for Policy Erlinda F. Basilio turned over to the Pyongyang Kaeson Middle School a Philippine donation of Philippine and ASEAN books, as well as a computer set consisting of one desktop computer, one laptop computer, and one printer last July 1.

Undersecretary Basilio was in Pyongyang with other Philippine officials to take part in scheduled Policy Consultations with the Foreign Ministry of the Democratic People’s Republic of Korea (DPRK).

Established in August 1960 and located in Pyongyang’s Moranbong District, Pyongyang Kaeson Middle School was designated the Philippines-DPRK Friendship School on 23 August 2010, as part of the 10th anniversary of the establishment of diplomatic relations between the two countries. The school is run by nine officials and 79 teachers, and has a student population of 1,454.

The donation was undertaken in cooperation with the Philippine Embassy in Beijing and the PH-Korea Friendship Society, based in Pyongyang.

The Philippines and the DPRK established diplomatic relations on 12 July 2000.

Additional information:

1. The DPRK routiney names schools and farms as “Country X-DPRK Friendship school/farm”.   For example, the Songyo Secondary School is also the “DPRK-Mongolia Friendship School”.  I have written about “friendship farms” before (here and here).

2. The PH [Philippine]-Korea Friendship Society is an “organization” in the “TaeMun” (대문) portfolio.  대문 is the North Korean abbreviation for 대외문화련락위원회, or in English, the Committee for Cultural Relations with Foreign Countries.  I say “organization” because in reality this friendship society, like all of the others, contains only one or two part-time members.  TaeMun takes its origins from an imported Soviet office named the All Union Society for Cultural Relations with Foreign Countries (Всесоюзное общество культурных связей с заграницей), known in the West by the acronym VOKS (from the Russian “BOKC”).  Historically, its  job was to create sympathetic constituencies in foreign countries and provide the North Korean government with an alternate channel of foreign information, but since the Arduous March they have transformed their mission to focus more directly on resource acquisition.  There is some tension between TaeMun and the DPRK Foreign Ministry.  TaeMun has a web page here.

3. Here are some previous posts on the DPRK-Philippines relationship: here, here, here and here.

Share

Friday Grab Bag: Anju, UN, pr, app

Thursday, June 30th, 2011

Anju’s outdoor market

Voice of America published a series of photos from inside the DPRK. Many of the pictures are from Anju. Looking through them, I saw this outdoor market of which I was unaware.  It did not, however, take too long to find it on Google Earth. The coordinates of the outdoor market are 39.623199°, 125.680848°. Anju and nearby Sinanju both also have one covered market each.  Lots of shoes for sale.

 

UN Conference on Disarmament
The winner of the “rolling eyes” award this week goes to the announcement that the DPRK has been named to the presidency of the United Nations Conference on Disarmament.  According to the official press release:

In his initial address to the Conference as president, So Se Pyong of the Democratic People’s Republic of Korea said that he was very much committed to the Conference and during his presidency he welcomed any sort of constructive proposals that strengthened the work and credibility of the body. He was ready to work closely with all members to provide the grounds for strengthening their work. As president, he would be guided by the Rules of Procedure and take into account the position of each delegation to find common ground on substantive issues and procedural matters as well. With their support and cooperation, he would do everything in his capacity to move the Conference on Disarmament forward.

I am sure you can think of some recommendations for him!

Canada has since boycotted the committee (2011-7-11).

 

How to Generate Good Press: Write it
This week the Wall Street Journal’s Korea Real Time had a great post about the North Korean proclivity to purchase advert space in foreign publications and then report “favorable coverage” to the people back home.  ”See how much foreigners envy us and out leader[s]“?!

Paying for space in Blitz actually represents something of an economy drive for the Pyongyang publicity machine. Back in 1997, as famine gripped the land, the regime shelled out for some pricier real estate: a full page in the New York Times. That allowed the KCNA to boast that the U.S. newspaper of record had “dedicated one whole page to a special writeup under the title ‘Kim Jong Il Emerges As Lodestar For Sailing the 21st Century’”—with, as the KCNA noted, a large color picture.

Here are five stories from KCNA citing praise in the New York TimesKCNA 1, KCNA 2, KCNA 3, KCNA 4, KCNA 5.  As far as I can tell, the DPRK has never advertised in the Wall Street Journal.  Wouldn’t that be something.

 

DPRK: There’s an app for that
Martyn Williams writes about Eric Lafforgue’s new iPhone app featuring his pics of the DPRK.  His photo set is here.  Now all we need is a Kernbeisser iPhone app.

Share

N. Koreans use phones to sneak information out

Wednesday, June 15th, 2011

According to the Korea Herald:

North Korea is a country that has been almost entirely isolated from news around the world for the past 60 years. The regime in Pyongyang allows Internet access to only a fraction of government officials and its power elite as it prepares for a third-generation hereditary succession to a young man in his late 20s.

The people of North Korea have been brainwashed since childhood to pay respect to the country’s idolized “Great Leader” Kim Il-sung and his son “Dear Leader” Jong-il.

So was Kim Hung-kwang until he began watching South Korean movies and drama in 1995.

“Toddlers are taught by their parents to say ‘thank you, Dear Leader’ before every meal,” Kim said in an interview with The Korea Herald.

“I had been a brainwashed, proud member of the (North Korean Workers’) party myself, until I came across South Korean films in 1995 and eventually learned that the outside world was much better.”

The computer engineering professor managed to flee the North seven years later and arrived in the South in 2003. He was joined by his family two years later.

Born in the eastern coastal city of Hamheung in 1960, Kim graduated from Kim Chaek University of Technology in Pyongyang, meaning he had been one of the North Korean regime’s highly trusted party members. While working as a professor of computer engineering at the Communist University, he was caught for lending some CDs containing South Korean drama to a friend and was sent to a collective farm as punishment.

This prompted him to defect to the South via China in 2003.

In 2008, he launched North Korea Intellectuals Solidarity with about 300 professors, engineers, doctors, journalists and writers from the North.

Now, he runs a dormitory and school for children of fellow defectors from the North, an Internet broadcasting station and publishes a periodical of articles by his colleagues.

The NK Intellectuals Solidarity is also a well-known source of breaking news from the North such as the currency denomination measure in late 2008 thanks to its informants around the China-North Korea border areas.

About 3,000 mobile phones are believed to be secretly used in the North for business purposes or delivering local information across the border, according to Kim.

“About 10 of them are ours, through which we hear about what’s going on there from our informants,” he said.

The informants in the North face the danger of getting caught by the authorities while speaking on the phone near the Tumen and Yalu Rivers with their co-workers in China.

One of Kim’s informants was caught two years ago on charges of spying and was tortured to death.

“She was a mother of three in her 30s who told us things like how the locals perceive the latest economic policies, but (the North Korean authorities) branded her as a spy,” Kim said.

“(Her death) was traumatizing and made us question if we should keep doing this. But we decided not to stop because otherwise, we wouldn’t be able to know about the inhumane crimes committed in the North.”

Kim’s solidarity has also sent in about 300 USBs technically modified to avoid detection.

The USBs do not contain any propaganda, but information on “what the defectors found surprising in the South,” dozens of new media programs such as PDF viewer, MP3 player software and e-books to enable more North Koreans to view South Korean video and text files, Kim said.

“Contrary to what we had expected, copies of Wikipedia entries turned out to be the most popular (among the North Koreans),” he said.

Currently, only five homepage servers are registered under the North Korean domain (.kr). The country connected itself to the Internet in mid-August, but only a handful of selected people are believed to have access to the Web.

Over 20,000 North Koreans have defected to the South since the Korean War ended in a truce in 1953. Hundreds are entering the South each month now mostly via China.

“I think about 4,000 people will arrive (in the South) next year,” Kim said.

“Women used to take up about 80 percent (of the defectors) before, but lately the percentage of men is going up.”

The North still maintains tight vigilance along its borders, but an increasing number of people manage to avoid the authorities’ eyes mainly thanks to bribery.

“Nowadays, it costs between 3.5 and 4 million won to bribe a single person (a soldier along the border, for example) in order to cross the border. The price goes up as (the North) tightens borderline vigilance,” Kim said.

About the North Korean people’s consciousness that they were being mistreated by the dynastical regime in Pyongyang, Kim said it was still in a “germinal stage.”

Pyongyang has tried to soothe its starving people by promising that food supply will be normalized next year, the deadline Pyongyang has set to become a “strong and prosperous nation.”

“But if the food conditions do not improve next year and turns out that it was all words and no action, people will really turn their backs against the government,” Kim said.

“They will know for sure that they are merely being used by the government. They will think that an individual’s basic rights should be placed above their government and start thinking about why there is such a major gap between what the current regime says and the reality.”

The North Koreans are now starting to learn about the need for a social safety net and how the South Korean society is going about its welfare policies through the limited information they receive from outside, Kim said.

“The third stage will be discussing what they have learned among themselves,” he said.

“Starting from groups of two or three people, the discussions will expand and eventually allow certain groups to take action.”

South Korea has reportedly been making contingency plans for various scenarios including a “sudden change” in the North such as the collapse of the Kim regime that will lead to a massive movement of refugees across the inter-Korean border.

“In case of a sudden change, the South can run a buffer zone just south of the border to temporarily house the refugees and prepare them for life in the South, although blocking the people’s free travel would be another issue,” Kim said.

“But because it would be a temporary measure, I don’t think we need to worry too much about a mass influx of refugees.’

Kim also noted that while preparing for a sudden change or unification, South Koreans should not underestimate the North.

“The South has no nuclear weapons, no inter-continental ballistic missiles, no cyber warfare troops, and most important of all, it suffers from internal conflict,” he said, mentioning an online survey last year that showed that some South Koreans did not trust their own government’s conclusion that the North torpedoed the Cheonan.

Kim said the North was training some 3,000 hackers to attack the IT systems of major South Korean institutions.

The prosecution concluded last month that North Korea was behind the cyber attack that paralyzed the banking system of the National Agricultural Cooperative Federation, or Nonghyup, in April.

“Our website was attacked in the same way they attacked Nonghyup,” Kim said.

“The North is very good at stirring up social conflict in the South, prompting certain pro-North groups to call on the government to ‘appease the North,’ or send money to Pyongyang. Their aim is to set up a pro-North regime in the South,” Kim said.

As for the “pro-North people” in the South, Kim said they seemed to hold an illusion that the North Korean system might settle their personal grudges or social problems in the South despite the fact that the Kim regime’s ideology has failed in reality.

Kim called on the South Korean government to set up a clear set of rules and conditions regarding the extent of humanitarian aid the South can send to the North in cases of natural disasters, for example, so that emergency aid to the North becomes more transparent.

Read the full story here:
N. Koreans use phones to sneak information out
Korea Herald
Kim So-hyun
2011-6-15

Share

No. 91 Office

Wednesday, June 1st, 2011

Pictured above (Google Maps): No. 91 Office

According to the Daily NK:

No. 91 Office, as it is known, is allegedly run under the auspices of the General Bureau of Reconnaissance.

A defector with substantial experience of conditions there offered information on the situation as far back as 2006 at the NKnet-organized “2011 North Korean Cyber Terror Seminar.”

The defector was unable to attend the seminar in person due to fears for his safety, but via pre-produced materials he explained how No. 91 Office is located in a set of two two-storey buildings in the Dangsang-dong of Mankyungdae-district, and how he entered the buildings on a number of occasions thanks to his relations with traders and cadres affiliated to it.

Additionally, satellite images were used to show the location of the office, just 300m from Ansan Bridge across the Botong River.

The defector also detailed the staff of No. 91 Office; the head, in 2006 a PhD-holding colonel in his 40s, a Party secretary ranked lieutenant-colonel, a similarly-ranked National Security Agency agent and around 80 staff, all in their 20s and 30s.

The 80 staff, all excellent minds selected from Kim Il Sung University, Chosun Computer University, Kim Chaek University of Technology and other elite schools, often spoke of ‘business trips’ to Shenyang and Dandong in China, the source explained.

The No. 91 Office-affiliated trade arm had five workers at the time, and is known as the ‘May 18th Trading Company, he added. Through it, the No. 91 Office allegedly obtains the equipment to do its work and provides hackers and other staff with daily necessities.

The unit has a 35-seater bus and two cars with number plates starting with ‘33’ or ‘34’, officially denoting vehicles belonging to the Mining Industry Department of the Cabinet.

Here and here are previous post on the Reconnaissance Bureau.

Here is a post on similar cyber warfare units in the DPRK: Mirim College and Moranbong University

Read the full story here:
No. 91 ‘Hackers HQ’ Revealed
Daily NK
Kim So Yeol
2011-6-1

Share