fileDownload2.dodoc_id1OL7nuiocbsfileNameEC9DB4EC8A88EC9980EB85BCE_6xoOrB7.pdf (557 KB)

The National Assembly Research Service assesses North Korean cyber operations as an international security issue that has evolved from early DDoS activity into ransomware, financial-institution attacks, and cryptocurrency theft. The report says North Korea’s cyber activity shifted from intelligence collection toward revenue generation around 2016, with stolen financial assets and cryptocurrency viewed as funding sources for nuclear and missile programs. It highlights South Korea-U.S. cooperation, including working-group and symposium activity focused on countering DPRK cryptocurrency theft, and calls for stronger international cooperation, public-private collaboration, and an integrated cyber-security legal and policy framework.