From the 7.7 DDoS attacks in 2009 that targeted the websites of the Blue House and the National Assembly, to the 2017 assassination of Kim Jong-un's half-brother Kim Jong-nam in Malaysia, the Reconnaissance General Bureau under the Korean People's Army General Staff Department has been identified as the mastermind behind almost every major North Korean provocation and overseas operation.
North Korea has now signaled that it will expand the scope of this organization's activities, following its rebranding as the Reconnaissance Intelligence General Bureau.
This was announced during an enlarged meeting of the Central Military Commission of the Workers' Party of Korea, presided over by Kim Jong-un yesterday (July 9).
The state media reported that tasks and measures were presented to diversify the functions and missions of the Reconnaissance Intelligence General Bureau, which plays a pivotal role in managing threats from potential adversaries and collecting critical intelligence, and to dramatically enhance military reconnaissance and intelligence-gathering capabilities.
Given that the Reconnaissance General Bureau is known to be the control tower for North Korean hacking groups such as Lazarus and Kimsuky, there are concerns that cyberattacks and data theft operations could be intensified across the board.
Analysts also suggest that by defining the targets of its intelligence activities as potential adversaries rather than specifically mentioning South Korea, the U.S., or the trilateral cooperation between South Korea, the U.S., and Japan, North Korea may be preparing for a different level of information warfare.
[Interview] Lim Eul-chul / Professor at the Institute for Far Eastern Studies, Kyungnam University: "This should be viewed as an organizational restructuring with modern warfare, information warfare, and especially cyber warfare in mind. It is interpreted as an intention to expand the scope beyond just mentioning South Korea, to now encompass NATO countries as well."
The existence of the Reconnaissance Intelligence General Bureau was first identified in a statement by Pak Jong-chon, Vice Chairman of the Central Military Commission, in September 2025.
At that time, Pak Jong-chon stated that he had received a report from the Reconnaissance Intelligence General Bureau regarding the commencement of the South Korea-U.S. nuclear operation exercise Iron Mace and the South Korea-U.S.-Japan joint exercise Freedom Edge.
Reported by Kim Ayeong | Video by Jo Chun-dong | Video Editing by Kim Jong-tae | Produced by SBS Digital News
※
Copying, redistribution, and unauthorized use in AI training are strictly prohibited.