North Korea Hacks South Korea Chip Manufacturers

South Korea's intelligence agency reports that North Korean hackers have successfully infiltrated chip equipment manufacturers in the southern region.

The National Intelligence Service (NIS) reveals that Pyongyang's motive behind the cyber intrusion is an attempt to independently produce semiconductors for its weapons programs.

The breach follows President Yoon Suk Yeol's earlier warning about potential North Korean provocations, including cyber attacks, to disrupt upcoming elections.

The NIS speculates that North Korea's pursuit of semiconductor self-sufficiency may stem from challenges in obtaining these components due to international sanctions.

The agency suggests that the effort could be driven by the necessity for chips in various weapons programs, including satellites and missiles.

The intrusion, believed to have occurred in December and February, targeted the servers of two chip equipment companies, resulting in the theft of product designs and facility photographs.

While the NIS urges vigilance and precautionary measures within the chip-making industry, it refrains from disclosing the names of the affected firms or confirming the acquisition of valuable information by North Korea.

The agency highlights the persistent targeting of South Korean companies by North Korean hackers since late last year and notes the utilization of a technique known as "living off the land."

This method involves minimizing malicious codes and exploiting existing, legitimate tools within servers, making detection challenging for security software.

President Yoon's office, which previously experienced a breach in an aide's email account, attributes the incident to a violation of security regulations rather than a direct hack into the official system.

While North Korea consistently denies involvement in cybercrimes, South Korea continues to attribute significant financial losses, often in cryptocurrency, to North Korean hackers, linking the illicit gains to funding the regime and its nuclear weapons program.

Estimates suggest that North Korea has pilfered as much as $3 billion (£2.36 billion) since 2016, utilizing cyber attacks not only for financial gain but also to obtain state secrets, particularly advanced weapons technology.

Despite facing severe international sanctions, North Korea's cyber capabilities are evolving, posing an increasing threat to cybersecurity.