North Korea denies US claims of cyber attacks, threatens countermeasures

Lead

North Korea's foreign ministry on Sunday rejected US accusations that Pyongyang poses a cyber threat, calling them a fabrication designed to justify Washington's longstanding hostile policy, according to state media KCNA. The statement comes amid ongoing US efforts to curb North Korean cyber activities, which Washington says fund its weapons programs.

Coverage Comparison

Reports from Reuters (via the Jerusalem Post), Deutsche Welle, and Yonhap News all confirm the North Korean foreign ministry's denial, with each outlet quoting the ministry's characterization of the claims as "absurd slander." The sources agree that North Korea's response was delivered through KCNA, and that the ministry described the US allegations as politically motivated falsehoods.

While the core story is consistent, the outlets vary in their additional context. Deutsche Welle places the denial against the backdrop of a 2024 UN panel estimate that North Korea-linked cyberattacks have stolen over $3 billion in cryptocurrency since 2017, and notes that a cybersecurity firm has called the country "the world's most prolific cyber-thief." The Jerusalem Post's report, based on Reuters, highlights US Treasury sanctions imposed in March on six individuals and two entities linked to North Korean IT worker operations, and notes that US authorities say the schemes remain ongoing. Yonhap News focuses on the dismissal of allegations that North Korea was behind a recent international hacking case, providing extensive quotes from the ministry spokesperson.

No source disputes the basic facts of the denial, though each frames the story with a slightly different emphasis: European coverage highlights the financial scale of the alleged cybercrimes, the Israeli outlet underscores ongoing US enforcement actions, and South Korea's Yonhap places the story within the broader context of US-North Korea tensions.

Key Claims

• North Korea's denial: A foreign ministry spokesperson, as quoted by KCNA, called the US accusations "absurd slander" and described the alleged "cyber threat" as nonexistent. This claim is reported by all three outlets.
• US accusations: Washington has repeatedly accused North Korea of state-sponsored cyber activity, including hacking, cryptocurrency theft, and using overseas IT workers to generate revenue for weapons programs. This is reported by all three outlets.
• Treasury sanctions: In March, the US Treasury sanctioned six individuals and two entities linked to North Korean IT worker operations, saying they helped channel illicit earnings through digital assets. This is reported only by the Jerusalem Post (Reuters), but is consistent with official US actions.
• DOJ sentencing: In April, the US Justice Department sentenced two Americans for helping North Koreans secure remote IT jobs with US firms. This is reported only by Deutsche Welle, but is a matter of public record.
• Financial impact: A 2024 UN panel estimated that North Korea-linked cyberattacks have stolen over $3 billion in cryptocurrency since 2017, funds believed to support missile and nuclear development. Reported only by Deutsche Welle, this claim carries medium confidence due to single-source reporting.
• Lazarus group: North Korean hacking group Lazarus has been accused of launching cyberattacks, most recently last month on a decentralized finance platform. Reported by Yonhap, this claim is widely acknowledged by cybersecurity researchers.

Perspectives

US and international view: Washington and its allies view North Korean cyber activities as a significant threat, citing evidence of hacking, cryptocurrency theft, and IT worker infiltration. US authorities have taken punitive measures, including sanctions and prosecutions, indicating that they consider these schemes ongoing.

North Korean view: Pyongyang denies all allegations, framing them as a smokescreen for US hostility. The ministry argues that the US, which controls global IT infrastructure, is itself a major cyber aggressor and cannot credibly claim victimhood. North Korea vows to defend its interests in cyberspace.

Expert assessment: Cybersecurity firms and UN panels regard North Korea as a major cyber threat, with the Lazarus group being a prominent actor. Their assessments are based on technical forensics and attribution, though North Korea's denials are persistent and difficult to verify independently.

The article reflects the factual record as reported by multiple outlets. Where sources disagree or offer varying emphasis, the text notes these differences without making judgments about omissions or reliability. As of this writing, no further developments have been reported.