Overlooked and underestimated: How North Korea has become a security threat to Europe

Shownotes

North Korea should no longer be dismissed as a reclusive authoritarian regime in the Indo-Pacific. Through cyberattacks, arms supplies and military support for Russia’s war against Ukraine, Pyongyang has become a direct security threat to Europe, argues Eric Ballbach.

Guest: Dr Eric Ballbach is SWP’s Korea Foundation Fellow. His research focuses on Foreign and security policies of North and South Korea.

Host: Esme Nicholson

Recommended Reading: Eric J. Ballbach: The K(orea)-Factor in the Zeitenwende. South Korea and the Rebuilding of Germany’s Defence Industrial Base, SWP Comment 2026/C 04, 28.01.2026 Eric J. Ballbach, et al.: Schockwellen nach Osten: Wie der Iran-Krieg die politische Landschaft Asiens verändert 360 Grad, 27.04.2026 Eric J. Ballbach: Nordkoreanische Truppenentsendung nach Russland. Motive Pjöngjangs und Implikationen für Europa, SWP-Aktuell 2024/A 57, 14.11.2024

Transkript anzeigen

00:00:01: North Korea's recently revised constitution,

00:00:03: which boosts

00:00:04: King Jong-un as a nuclear authority and Pyongyang's continued support for Russia's war in Ukraine on display at Moscow's victory parade this year are but two warning signs that Europe has the strategic blind spot about what it can no longer dismiss an obscure shut off dictatorship.

00:00:24: You're listening to the latest

00:00:25: podcast

00:00:26: from The German Institute for International and Security Affairs, or SWP for short here in Berlin.

00:00:32: In today's episode we'll unpick North Korea's growing security threat to Europe – ask why it appears to have gone unnoticed?

00:00:39: And what Europe AND NATO can do about it!

00:00:43: I'm your host Esme Nicholson... ...and to discuss the nature of North Korea threats….

00:00:47: …from its intensifying alliance with Russia on its extensive cyber warfare capabilities.

00:00:52: I'm joined today by Eric Baalbach, SWP's career foundation fellow.

00:00:56: In addition to his research, Eric's expertise has been put to use in numerous informal dialogues between North Korea, South Korea and the United States.

00:01:05: Eric thank you for coming into this studio today.

00:01:07: Thank You so much for having me!

00:01:21: I

00:01:24: think it's absolutely crucial to acknowledge that the North Korea of today is not the North Korean of two thousand eighteen, two thousand nineteen when we last dealt with Pyongyang diplomatically.

00:01:36: It has fundamentally changed its foreign policy strategy also security strategy.

00:01:42: And this changed.

00:01:44: followed what the North Koreans deemed as a failure of diplomacy, especially summit diplomacy with the US.

00:01:51: We all remember that three summit meetings between Kim Jong-un and Donald Trump during his first term And the failure of Hanoi summit ultimately led to a fundamental revision in North Korea's foreign and security strategy.

00:02:07: In terms of foreign policy, this meant that it stopped diplomacy with

00:02:13: U.S.,

00:02:13: but also South Korea as we will discuss probably later – also Europe.

00:02:19: And in terms of security strategy, Kim Jong-un announced January the so called five year military modernization plan.

00:02:29: So a wish list on what Kim Jong Un deemed important to turn the country into what they describe now as fortified nuclear power?

00:02:41: These are

00:02:44: part of it.

00:02:45: Yes, the changes to the constitutions are a part of this.

00:02:48: in twenty-twenty two North Korea announced new nuclear doctrine that basically lowered the threshold off any given nuclear power.

00:02:59: uh... to do with degree we have never seen before on its also delegated power all in terms of who is actually able in north korea Basically, say when a nuclear weapon should be used or not.

00:03:15: And all of these revisions basically are part of this new foreign and security strategy.

00:03:22: That also made North Korea greater threat to Europe because one the elements was that North Korea changed its diplomacy away from

00:03:32: U.S.,

00:03:32: South Korea in Europe towards China mainly Russia.

00:03:36: Well, and as mentioned North Korean soldiers marched alongside Russian troops in Moscow this year's victory parade.

00:03:44: In Russia beyond the symbolism how would you define The Putin-Kim partnership right now?

00:03:52: Well, I would say that this cooperation between North Korea and Russia has evolved from tactical alignment more to something much more operational now.

00:04:04: It is still transactional at its core but it's increasingly strategic in scope crucial to understand.

00:04:14: It's not so much an ideologically based cooperation, it is a win-win situation.

00:04:20: North Korea has something to offer what the Russians need and vice versa.

00:04:25: The Russian needed political support for their war against Ukraine.

00:04:31: They needed military support in terms of ammunition missiles but also troops manpower And the North Koreans in turn needed food, energy assistance but also support its strategic military programs especially when we talk about re-entry technology of intercontinental ballistic missiles.

00:04:55: But also nuclear powered submarines – all these are connected now to co-closer cooperation with Russia.

00:05:03: Well, with North Korean soldiers fighting on European soil the threat is becoming more obvious to Europe.

00:05:13: So tell me exactly it that Pyongyang getting out of its support for Russia in its war against Ukraine?

00:05:21: For the North Koreans, I would say there are economic political strategic and military benefits to support Russia economically.

00:05:30: Of course we know about deliveries of weapons And we think that North Korea gained dramatic financial gains from this.

00:05:41: There is some estimates put the total revenues of over five hundred million solely from the deployment of troops, with others saying more than ten billions they made from selling those weapons.

00:05:55: So this is significant.

00:05:56: but apart from uh...the actual number here I would say North Korea also gained politically and strategically.

00:06:04: for years they have engaged in denuclearization dialogues mainly with the objective of weakening international sanctions.

00:06:14: They have now achieved the weakening of the sanctions regime without giving anything on the denuclearization issue, only through strategic cooperation with Russia and Russia vetoed the mandate for the panel of experts in the UN Security Council which basically meant that supervision of sanctions implementation drastically decreased.

00:06:40: They achieved one of their main strategic objectives through this closer cooperation with Russia.

00:07:00: So achieving one of those strategic aims as well.

00:07:04: And, ultimately there are also military benefits.

00:07:07: The war in Ukraine serves a testing ground for North Korea's ammunition weapons and personnel Those weapons used by the Russians against Ukraine.

00:07:19: These information about their war capability are funneled back to North Korea.

00:07:26: They use these informations further perfecting their weapon system.

00:07:30: North Korean soldiers gaining active war fighting experience, especially in a more modern war scenario where drones are used heavily and relied upon.

00:07:43: But ultimately of course we see a lot of signs that Russia also supports North Korea internally militarily giving strategic advice to some of those aspects that the North Koreans have not yet perfected themselves, and that is mainly re-entry technology of ballistic missiles.

00:08:02: Reconnaissance satellites – one which has been now successfully deployed by the North Korean.

00:08:10: And we have signs that the Russians support the North Korea in terms building up a nuclear powered submarine fleet.

00:08:18: And of course, North Korea is not just a nuclear threat.

00:08:20: It has become one of the biggest cyber threats to Europe.

00:08:24: as I understand it – how cognizant are Brussels and the broader public about this?

00:08:30: Tell us maybe a little bit more what's already happening.

00:08:39: You know, to be perfectly honest I still think that most policy makers struggle to accept North Korea has become an equal nation in terms of cyber capabilities.

00:08:50: We hear a lot about this reputation of Pyongyang being isolated and underdeveloped state but Pyong Yang implemented comprehensive program to advance cyber technology and systematically cultivate human capital around it.

00:09:06: There is, of course no official data on the structure of various advanced persistent threat groups in North Korea.

00:09:13: But it has been estimated that the DPRK cyber army consists roughly seven thousand specialists all working under direction of the reconnaissance general bureau which Only throughout twenty-twenty four just to give you an impression of how deep this actually goes only in twenty, twenty for a DPR.

00:09:40: KDPRK IT workers have significantly expanded their operations beyond the US now increasingly targeting organizations across Europe with increased targeting of companies.

00:09:53: In Germany Portugal and the UK in its threat security and a thread landscape.

00:10:00: In twenty-twenty five, which the EU's agency for cyber security identifies the most significant cyber threats to Europe?

00:10:09: North Korea is ranked now as third largest threat to Europe following only Russia and China.

00:10:16: I would say.

00:10:17: overall North Korea's cyber operations in and against Europe can be divided into two main categories.

00:10:24: These are financially motivated attacks such as cryptocurrency thefts, the other being cyber espionage.

00:10:32: Cyber crime and espionages?

00:10:34: Exactly!

00:10:35: For example, North Korean cyber actors target various institutions in Europe linked to, for example the defense sector but also the health and energy sector.

00:10:48: They attacked various government-linked agencies.

00:10:52: In the past we saw effects of North Korean cyber attacks on the German railway system on individual companies And especially defence companies have become primarily targeted because South Korea now is a very active provider of defense goods to Europe.

00:11:13: Vice versa, for example German defense companies export weapons system to South Korea which South Korea then uses in its defensive strategy against North Korea.

00:11:24: so the North Koreans want know what's behind it also develop technology to circumvent these systems and especially missile defense systems.

00:11:36: Europe has become one of the primary targets by North Korean cyber actors.

00:11:41: I'd like to come in a minute what the solutions are, what Europe can do and should be doing about all these threats that North Korea poses but specifically on cybersecurity.

00:11:55: how resilient is Europe cyber security threats, in particular from North Korea considering it's a fairly new threat.

00:12:04: You know our resiliency is certainly not where it should be and that also results that North Korean activities

00:12:18: big

00:12:18: operations that have been reported everywhere.

00:12:21: It's small scale attacks, low key attacks but very broadly and how deep it goes.

00:12:27: I can give you an example sometimes hard to believe.

00:12:31: then in late twenty-twenty four there was an IT worker from North Korea.

00:12:36: this is one of their schemes too use online platforms to get basically into European companies through fake IDs Korean case known, he had at the same time twelve different identities throughout the U.S and Europe trying to get into employment at European defense companies but also government-linked institutions.

00:13:02: that of course is one They're in.

00:13:07: You know, they try to install software that gives them permanent access to these institutions.

00:13:14: They use schemes then basically to gather information within the institutions and then used this informations against those companies for example... ...they attack a lot of cryptocurrency rates also in Europe making millions and millions with these schemes.

00:13:39: And they use a vast network also of friendly cooperation partners.

00:13:45: Especially now also in Russia, we have increased information that Russia and North Korea cooperate on cyber issues with Russians giving North Koreans access into certain networks.

00:14:00: All of this is extremely dangerous considering the fact to North Korea – this all part a larger strategy.

00:14:08: Cyber has become part their geopolitical security strategies And the money they make through, for example cryptocurrency heists directly funds their military modernization.

00:14:22: Right okay so Europe is inadvertently part of and supporting in financing that there are military goals under it.

00:14:30: also Russia's war in Ukraine.

00:14:32: well all these threats surely a wake-up call Brussels for NATO, European governments or policy makers.

00:14:43: To what extent are they aware?

00:14:45: Are they already acting and what should be done?

00:14:48: What can?

00:14:54: European officials have not heard this wake-up call just yet, especially when with regard to North Korea's cyber threat.

00:15:01: What we can target of course are the mechanisms through which North Korea and Russia jointly try to circumvent sanctions for example because this is one of things that bound them together And This Is Why We See That This Cooperation Goes Way Beyond Military Issues.

00:15:17: Nowadays Already do.

00:15:21: And I think this is a very good sign, for example that the German intelligence service and South Korean intelligence services have two times now issued joint cybersecurity advisories with regard to North Korean cyber threats.

00:15:35: but these are more.

00:15:35: one of things i think what needs To be done much More Is A Much Deeper Intelligence Sharing.

00:15:43: But to do this, we need certain agreements in place which we don't have yet because South Korea is neither a NATO nor an EU member of course.

00:15:52: So we need agreement like structural freedom-of information security agreements... ...which then allows us go much deeper with intelligence sharing.

00:16:03: And this is absolutely crucial given that North Korean soldiers are supporting, or the most active supporter of Russia's war in Europe.

00:16:12: Given that North Korea is so active on the cyber front against and in Europe –and we still don't have all these intelligence sharing agreements is quite unusual, I think because the EU for example has such agreements in place with non-EU members.

00:16:32: Think about Canada or Japan.

00:16:35: but we need something like this also with the South Koreans.

00:16:38: that was... This would be one of things on the to do list In a way The other being much stricter against North Korean cyber operations.

00:16:49: But again, with life intelligence sharing all of this becomes much more realistic to achieve.

00:16:56: Well and zooming out because Europe of course doesn't act in a bubble... ...and also returning to the point you made about how North Korea has changed since The Hanoi Summit With Trump To what extent does US foreign policy In the region help?

00:17:13: or even hinder Europe right now?

00:17:16: Well, we don't have a clear North Korea strategy from the US just yet.

00:17:22: There are still many observers that expect return at least probably on Donald Trump's wish list to return of these summit meetings.

00:17:34: but you know in my view this would be a case Because ultimately, where we are right now is not least one of the effects of the failed summit diplomacy between Donald Trump and Kim Jong-un in first place.

00:17:50: And now North Korea.

00:17:52: as mentioned earlier it's a very different actor.

00:17:55: It has gained strategic leverage through Russia's war against Ukraine which I would even say that North Korea's revised foreign security strategy only worked due to those geopolitical changes.

00:18:09: They were only successfully implemented because Russia started this war against Ukraine, of which North Korea is one.

00:18:23: So, while anxiety about Russia shows no sign of abating Europe now also has its work cut out to address the growing threat from even further afield.

00:18:32: Eric we will no doubt return you for more analysis on how that goes but today I'd like thank you for shedding fresh light onto an issue.

00:18:42: Europe appears only just be beginning places including Spotify

00:18:54: and Apple.

00:18:55: You can also keep up to date with the latest analyses from SWP on Blue Sky, and on LinkedIn.

00:19:01: Today's episode was brought you by our editor

00:19:03: Maya Dana

00:19:04: And my host and of course by guest Erich Baibach.

00:19:08: So until next time it is goodbye for all of us here in The SWP Studio.

00:19:12: Thankyou For Tuning In.

Neuer Kommentar

Dein Name oder Pseudonym (wird öffentlich angezeigt)
Mindestens 10 Zeichen
Durch das Abschicken des Formulars stimmst du zu, dass der Wert unter "Name oder Pseudonym" gespeichert wird und öffentlich angezeigt werden kann. Wir speichern keine IP-Adressen oder andere personenbezogene Daten. Die Nutzung deines echten Namens ist freiwillig.