North Korea Internet outage could be a response to Sony Hack

According to a US Lawmaker North Korea Internet outage occurred in December could be a response for the cyber attack against the Sony Pictures

On December 2014, the North Korea suffered a significant network outage which isolated the country from the internet. Security experts speculated that the incident was a retaliation for the Sony hack. According to a Bloomberg report, a new revelation seems to confirm the hypothesis, Republican chairman of the House Homeland Security Committee Michael McCaul confirmed that the outage of North Korean connection was the response of the US to the attack against the Sony Pictures Entertainment.

“There were some cyber responses to North Korea,” McCaul said at an event hosted by the Center for Strategic and International Studies.

Republican chairman of the House Homeland Security Committee clarified that he was referring to the severe Internet outage suffered by the North Korea.

While security firms made different assumptions on the nature of attacks against the Sony Pictures, the FBI blamed the North Korea after its investigation.

“As a result of our investigation, and in close collaboration with other US Government departments and agencies, the FBI now has enough information to conclude that the North Korean government is responsible for these actions,” the FBI said Friday in a statement.

The White House hasn’t provided any official comment to McCaul McCaul’s declaration. McCaul urged the US Government to do more to protect American companies from cyber attacks. McCaul highlighted that US companies expect much more by the U.S.to retaliate against threat actors.

“What they’re telling me is that the government isn’t doing their job,” McCaul said.

McCaul also reported that the US Government and US companies are constantly hit by cyber attacks run by different actors, including state-sponsored hackers and cyber terrorists.

In reality there is a silent “cyber war” between North Korea and the US, Snowden revealed that the NSA compromised North Korea internet infrastructure with malware for years. the NSA has used its servers as hacking platforms (i.e. FOXACID) to hack in the system of foreign governments by implanting a malware. Other components involved in the attacks are Turbine and Turmoil, belonging to the Turbulence family exploitation systems. According to Snowden, the NSA also secretly tapped into South Korean network espionage on North Korean networks to collect information.

In response to the alleged cyber attack operated by the North Korea, President Barack Obama threatened a proportionate response and economic sanctions.

The McCaul’s statement led security experts to conclude that the Internet Outage was caused by an operation in a retaliatory of the Sony hack. Robert “RSnake” Hansen

Pierluigi Paganini

(Security Affairs – FBI, North Korea)

Pierluigi Paganini

Pierluigi Paganini is member of the ENISA (European Union Agency for Network and Information Security) Threat Landscape Stakeholder Group and Cyber G7 Group, he is also a Security Evangelist, Security Analyst and Freelance Writer. Editor-in-Chief at "Cyber Defense Magazine", Pierluigi is a cyber security expert with over 20 years experience in the field, he is Certified Ethical Hacker at EC Council in London. The passion for writing and a strong belief that security is founded on sharing and awareness led Pierluigi to find the security blog "Security Affairs" recently named a Top National Security Resource for US. Pierluigi is a member of the "The Hacker News" team and he is a writer for some major publications in the field such as Cyber War Zone, ICTTF, Infosec Island, Infosec Institute, The Hacker News Magazine and for many other Security magazines. Author of the Books "The Deep Dark Web" and “Digital Virtual Currency and Bitcoin”.

Recent Posts

Security Affairs newsletter Round 563 by Pierluigi Paganini – INTERNATIONAL EDITION

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best…

8 minutes ago

Fintech firm Figure disclosed data breach after employee phishing attack

Fintech firm Figure confirmed a data breach after hackers used social engineering to trick an…

20 hours ago

U.S. CISA adds a flaw in BeyondTrust RS and PRA to its Known Exploited Vulnerabilities catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in BeyondTrust RS and…

22 hours ago

Suspected Russian hackers deploy CANFAIL malware against Ukraine

A new alleged Russia-linked APT group targeted Ukrainian defense, government, and energy groups, with CANFAIL…

1 day ago

New threat actor UAT-9921 deploys VoidLink against enterprise sectors

A new threat actor, UAT-9921, uses the modular VoidLink framework to target technology and financial…

2 days ago

Attackers exploit BeyondTrust CVE-2026-1731 within hours of PoC release

Attackers quickly targeted BeyondTrust flaw CVE-2026-1731 after a PoC was released, enabling unauthenticated remote code…

2 days ago

This website uses cookies.