UK and South Korea issue warning over North Korea-linked cyber attacks

23 November 2023, 11:54

A woman using a latpop
Cyber attacks. Picture: PA

The UK’s cyber security agency has joined with its South Korean counterpart to warn of North Korean-backed actors targeting software supply chains.

The UK and South Korea have warned that cyber attacks from North Korean state-linked groups are growing in sophistication and volume.

In a new joint advisory issued by the two nations’ cyber security and intelligence agencies, they urge organisations to boost their security measures to reduce the risk of their systems being breached.

The UK’s National Cyber Security Centre (NCSC), which is part of GCHQ, and the South Korean National Intelligence Service (NIS) said they have observed hackers leveraging previously unknown vulnerabilities and exploits in third-party software in their supply chains in order to gain access to an organisation’s systems.

The two agencies have warned that such attacks on the software-based supply chain pose a particularly significant threat as it means a single initial compromise can affect a number of organisations and lead to onward attacks, resulting in greater disruption or ransomware being deployed.

The joint advisory warns that North Korean-backed attacks of this nature are likely to increase and urges organisations to take steps to better protect themselves.

Paul Chichester, NCSC director of operations, said: “In an increasingly digital and interconnected world, software supply chain attacks can have profound, far-reaching consequences for impacted organisations.

“Today, with our partners in the Republic of Korea, we have issued a warning about the growing threat from DPRK (North Korea) state-linked cyber actors carrying out such attacks with increasing sophistication.

“We strongly encourage organisations to follow the mitigative actions in the advisory to improve their resilience to supply chain attacks and reduce the risk of compromise.”

The joint advisory is the first time the NCSC has issued such a warning without partnership from other Five Eyes agencies – those in Australia, Canada, New Zealand and the US – and comes during the state visit to the UK by South Korean President Yoon Suk Yeol.

By Press Association

More Technology News

See more More Technology News

Laptop with a virus warning on the screen

Nato countries are in a ‘hidden cyber war’ with Russia, says Liz Kendall

Pat McFadden

Russia prepared to launch cyber attacks on UK, minister to warn

A person holds an iphone showing the app for Google chrome search engine

Apple and Google ‘should face investigation over mobile browser duopoly’

A Google icon on a smartphone

Firms can use AI to help offset Budget tax hikes, says Google UK boss

Icons of social media apps, including Facebook, Instagram, YouTube and WhatsApp, are displayed on a mobile phone screen

Growing social media app vows to shake up ‘toxic’ status quo

Will Guyatt questions who is responsible for the safety of children online

Are Zuckerberg and Musk responsible for looking after my kids online?

Social media apps on a phone

U16s social media ban punishes children for tech firm failures, charities say

Google shown on a smartphone

US Government proposes forcing Google to sell Chrome to break-up tech empire

The logo for Google's Gemini AI assistant

Google’s Gemini AI gets dedicated iPhone app in the UK for the first time

Facebook stock

EU fines Meta £660m for competition rule breaches over Facebook Marketplace

A phone taking a photo of a phone mast

Government pledges more digital inclusion as rural Wales gets phone mast boost

Social media apps displayed on a mobile phone screen

What is Bluesky and why are people leaving X to sign up?

Someone types at a keyboard

Cyber security chief warns Black Friday shoppers to be alert to scams

MPs

Ministers pressed on excluding Chinese firms from UK’s genomics sector

Child with mobile phone stock

Specially designed smartphone for children launches in the UK

Roblox on a laptop

Children’s gaming platform Roblox makes ‘major update’ to parental controls