Finance.Biggo North Korea Faces Widespread Website Outages Amid Speculation of Cyberattack
Article Content
- •Over 40 North Korean websites have been offline for more than 24 hours as of October 21, 2026.
- •Possible causes of the outage include physical line faults, maintenance, or a DDoS attack, but no clear evidence has emerged.
- •The outages have disrupted access to state media and government information, impacting external communication.
As of October 21, 2026, North Korea's major websites, including state media and government portals, have been offline for over 24 hours, affecting more than 40 sites. The outages began around 11 a.m. KST on October 20, with intermittent connectivity reported. Potential causes include physical line faults, maintenance, or a distributed denial-of-service (DDoS) attack, but no definitive evidence of a cyberattack has been confirmed. South Korean security analysts noted disruptions in the Border Gateway Protocol (BGP) routes, indicating possible internal network issues. The outages have impeded access to state-provided information, including news about Kim Jong-un's public appearances. While some sites briefly restored connectivity, they have remained largely inaccessible. North Korea's reliance on external internet services from China and Russia may contribute to the fragility of its online presence.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (5)
Following this threat?
Track Air Koryo in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What websites are affected by the outage?
Is there evidence of a cyberattack?
What should organizations monitor regarding this incident?
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…