cta-2020-0209.pdf (3 MB)

Recorded Future's Insikt Group analyzed 2019 internet activity by North Korean senior leadership using third-party data, IP geolocation, BGP routing, network traffic, and OSINT. The report assesses that the internet had become critical for DPRK revenue generation, sanctions evasion, access to prohibited technology and knowledge, and operational coordination. It is aimed at technology, finance, defense, cryptocurrency, and logistics organizations, as well as investigators tracking North Korean sanctions circumvention, illicit financing, and state-sponsored cyberespionage.