DDoS waves knock more than 40 North Korean websites offline
Original title: North Korea Hit by Multiple Waves of DDoS Attacks, Knocking Over 40 Websites Offline
Kentik tied October 20 outages to synchronized traffic from Vietnam, the Philippines and Venezuela; no perpetrator was identified.
Kentik said synchronized inbound traffic from 02:01 UTC on October 20, 2026 intermittently took North Korean .kp sites offline for about 32 hours. Affected services included the Ministry of Foreign Affairs, KCNA, Rodong Sinmun, Naenara, Air Koryo, the Silibank mail server and .kp name servers in 175.45.176.0/24. SBS reported 42 major sites stable again around 7 p.m. on October 21. Kentik did not identify who launched the attack.
Unconfirmed: Perpetrators are unidentified, and routing changes may have been defensive or connectivity-related.
- Observed traffic came from Vietnam, the Philippines and Venezuela.
- KCNA was offline for 19 of the first 24 hours.
- AS131279 blocks shifted between Cenbong and Russian provider TTK.
- Kentik saw only part of the traffic toward North Korea.
- Bandwidth, packet rates, protocols and amplification were not reported.
Impact: Official .kp websites and name servers taken offline
- Organizations
- Kentik
From the original article
2 min read at gbhackers.com
Multiple waves of DDoS attacks disrupted North Korea’s internet infrastructure this week, intermittently knocking over 40 official websites offline for about 32 hours. Network monitoring company Kentik linked the outages to synchronized surges of inbound traffic that began on October 20, 2026. Doug Madory, Kentik’s director of internet analysis, noted that aggregate traffic data showed […]
By Divya · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.