 |
| ▲ James Sullivan, cyber director of the Royal United Services Institute (RUSI), a leading defense think tank in Britain, is seen in this photo provided by himself on March 5, 2026. (PHOTO NOT FOR SALE) (Yonhap) |
 |
| ▲ James Sullivan (L), cyber director of the Royal United Services Institute (RUSI), a leading defense think tank in Britain, and panelists speak at an event hosted by RUSI in Seoul on March 4, 2026. (Yonhap) |
British expert-cybersecurity
Britain sees N. Korea as 'major' cyber threat: cybersecurity expert
By Kim Hyun-soo
SEOUL, March 5 (Yonhap) -- Britain considers North Korea to be a "major" cyber threat actor as Pyongyang has been ramping up its cyberattack capabilities while seeking close military cooperation with Russia, the director on cybersecurity at London's leading defense think tank has said.
James Sullivan, cyber director of the Royal United Services Institute (RUSI), also said it is "not unreasonable" to assume that the North and Russia are cooperating on cyber operations, given their deepening military ties.
"The U.K. does see North Korea as a serious cyber threat, alongside China, Russia and Iran; they're the big four," he said during an interview with Yonhap News Agency on the sidelines of an event hosted by RUSI in Seoul on Wednesday.
While acknowledging that Britain is more focused on cyber threats from Russia and China, the director said Pyongyang is still a "major" cyber threat actor, noting the reclusive regime has attacked critical infrastructure to secure financial gains and to help support its military and nuclear programs in the past.
North Korean hackers are widely known for engaging in cryptocurrency theft and other illicit cyber activities in a bid to help fund the country's nuclear and missile programs.
Given growing military cooperation between Pyongyang and Moscow in recent years, the two countries are "increasingly likely" to work together on cyber operations, the British cyber official said.
"If both Russia and North Korea cooperate militarily, it is not unreasonable to assume that they're cooperating in cyberspace as well," he said. "There isn't as much evidence of it at the moment, but it's increasingly likely because they share the same objectives."
North Korea and Russia have been ramping up their military cooperation in recent years, with Pyongyang believed to have sent around 15,000 troops to support Moscow's war with Ukraine since October 2024.
On measures Seoul could take to deter such cyber threats from the North, the director underscored the importance of building "resilience," including through joint international law enforcement activities.
"The most important aspect of cyber is cybersecurity and the defensive aspects," he said, saying Seoul should steer its focus on the defensive domain, though offensive cybersecurity capabilities should still be considered.
Meanwhile, RUSI's cyber director also warned against increased "hybrid" warfare, including in the form of cyberattacks, from Iran, as U.S.-Israel's strikes on Tehran have raised concerns about a prolonged conflict in the region.
"In the short term, Iran will be very focused on the conventional military warfare that is taking place," Sullivan said.
"But if things slow down and the (current) Iranian regime stays in power, then in the medium to long term, it's likely they will return to the type of activities they are known for in terms of cyberattacks, spreading disinformation and using their hacktivist network to spread information and cause issues to Western networks," he added.
Sullivan was visiting Seoul to attend the RUSI-hosted event the previous day to discuss ways to strengthen cyber cooperation between South Korea and Britain.
(END)
(C) Yonhap News Agency. All Rights Reserved
