‘Internal cause’ suspected after North Korea hit by major internet outage

Reclusive country’s entire internet infrastructure wasn’t showing up on monitoring systems for several hours before it started coming back slowly around midday

North Korea's internet was hit by a major outage that lasted several hours on Saturday, knocking off connection to government websites and online news services and severing the reclusive country from cyberspace.

It was not clear what caused the outage, but it could have been internal rather than a cyberattack, as connections via China and Russia were affected, said researchers monitoring North Korea’s internet and technology infrastructure.

North Korea’s main official news services, its foreign ministry, and the Air Koryo national airline were among websites inaccessible on Saturday, before they started coming back slowly around midday, according to checks by Reuters.

North Korea’s entire internet infrastructure was not showing up on systems that monitor internet activities and email services were also affected, Junade Ali, a UK-based researcher who monitors the North Korean internet, said earlier.

“Hard to say if this is intentional or accidental, but seems like this is internal rather than an attack.”

Officials at South Korea’s cyber terror response centre, a police division that monitors North Korea’s cyber activities, could not be reached for comment.

Martyn Williams, who specialises in North Korea's technology and infrastructure at the Washington-based Stimson Center, also said the cause appeared to be internal as the Chinese and Russian connections were not working.

North Korea has one of the world’s most strictly controlled internet systems, including access to any form of online communication.

The general public has access only to an intranet set up by the government, and that is not connected to the wider global network.

An elite few in the government and leadership are allowed open internet access, and government and news websites often serve up propaganda for outside audiences.

North Korea has, in previous years, experienced large internet outages suspected as being caused by cyberattacks.

The country operates elite teams of hackers, including a group known as Lazarus, run by the government intelligence apparatus, that are blamed for attacks against foreign institutions and companies and more recently for theft and the laundering of cryptocurrencies.

North Korea denies involvement in hacking, crypto thefts and other cybercrime.