Sources: under the President's directive, US Cyber Command performed DDoS attacks against hackers in North Korea's military spy agency
Early in his administration, President Trump signed a directive outlining a strategy of pressure against North Korea that involved actions across …
Context & Ripple Effects
This report lands weeks after sources described a Pentagon program developing cyberweapons to sabotage North Korean missiles before liftoff — together they show the new administration treating offensive cyber as a standing pressure instrument against Pyongyang rather than a contingency. The presidential directive matters because it moved the trigger from the Pentagon to the White House.
What followed confirms the pattern held: DOD's 2018 Cyber Strategy formally authorized offensive hacking to defend election systems and the grid, Cyber Command disabled Iranian rocket- and missile-launch systems in June 2019 (the first publicly sourced strike of that kind), and by 2021 the US was planning attacks on Russian networks as SolarWinds retaliation. The North Korea DDoS campaign is the earliest data point in that escalation ladder.
First-order effects
- North Korea's military spy agency — the unit behind intrusions the FBI and DHS would later attribute to two long-running malware campaigns against US infrastructure, aerospace, financial, and media targets — absorbed direct DDoS pressure from Cyber Command under explicit presidential authorization.
Second-order effects
- Pyongyang's continued hacking activity through 2018 shows the pressure did not deter its operations, pushing the US toward harder-edged tools — the disablement strikes modeled on the Iran playbook and, eventually, network attacks tied to sanctions as retaliation for SolarWinds.
Third-order effects
- Offensive cyber shifted from classified contingency to declared doctrine: once presidential directives and the 2018 Cyber Strategy normalized it, each administration recalibrated the leash — Biden curbed Cyber Command's offensive leeway in his January 2021 executive order — making the rules of engagement a recurring political decision rather than a fixed military one.
The trend: US offensive cyber operations are becoming a routine, presidentially authorized instrument of statecraft, applied successively against North Korea, Iran, and Russia.