Hacker 'P4x' claims to be the one who stopped the North Korean Internet, motivated by dissatisfaction with the US government's response to the North Korean attack



On January 26, 2022, a hacker revealed that North Korea's Internet had been blocked for about six hours, 'it's his job.' A hacker calling himself 'P4x' was attacked by a North Korean hacker group in 2021 and stated that he had attacked in retaliation.

North Korea Hacked Him. So He Took Down Its Internet

https://www.databreaches.net/north-korea-hacked-him-so-he-took-down-its-internet/

Pissed-Off American Hacker Claims He Took Down North Korea's Internet
https://gizmodo.com/american-hacker-claims-he-took-down-north-koreas-intern-1848468102

You can find out more about the Internet outage in North Korea in January 2022 by reading the following article.

North Korea's Internet goes down due to DDoS attack --GIGAZINE



P4x is a white hacker who is active as an individual, and in 2021 he was hacked by North Korea and his personal information was stolen. However, he felt strongly uncomfortable that the North Korean hacking group targeted himself rather than the government or organization, and that the US government could not expect a response, P4x said, 'Please help anyone. If not, I'll help myself. '

P4x told WIRED that North Korea's systems are 'known but unpatched vulnerabilities' that take advantage of North Korea's few Internet connectivity networks. It is possible to attack servers and routers that depend on. As an example, P4x introduces a bug in NGINX , a web server management software, that 'mishandles certain HTTP headers and causes the server to go offline.' It also mentions that the original OS 'Red Star OS' developed by North Korea was pointed out to be vulnerable because it is based on an older version of Linux.

North Korea's original OS 'Red Star' has excellent security performance, but it can be easily hacked just by opening the link --GIGAZINE



'For me, this attack on North Koreais like doing a small to medium-sized penetration test ,' P4x said. P4x targeted all of the Provaganda sites targeted for access from outside North Korea, and the attacks on the systems of those websites were almost automated, and they regularly executed scripts to go online. After enumerating some systems, he was running an exploit to shut them all down.

According to cybersecurity researcher Juneade Ali, who monitors the North Korean Internet, the attack by P4x brought down major domestic routers in North Korea, including not only browsing the Internet but also e-mail. It seems that all services that require access to the Internet have become inaccessible.

Martin Williams, a researcher at the think tank Stimson Center , said, 'It's rare for the Internet to stop at this scale, but only a small number of North Koreans have access to systems connected to the Internet in the first place. '. According to Williams, most users in North Korea 'can only access the North Korean intranet, which is isolated from the Internet.'


by

(stephan)

However, Mr. P4x's attack could interfere with the intelligence activities of the United States and European countries. Therefore, some white hackers and security companies who have the same experience of being targeted by North Korean hacker groups as Mr. P4x say, 'I disagree with Mr. P4x.'

Given that security company Immunity founder Dave Eitel may also be interfering with routine intelligence activities, P4x's retaliation is questionable. .. However, Mr. Eitel agrees that the US government's response to the attack from North Korea was inadequate, saying, 'The United States is good at protecting governments and businesses, but when it comes to protecting individuals. Not really. '

When asked, 'What is the ultimate goal of a cyberattack on North Korea?' P4x said, 'The change of government ... no, it's a joke. I just want to prove my claim.' The claim has been clearly substantiated and I would like to stop (attacking North Korea). '

in Security, Posted by log1i_yk