logo
Headaches and Cigarettes: Conviction of Pyongyang Spies Reveals Their Playbook of Codes, Signals

Headaches and Cigarettes: Conviction of Pyongyang Spies Reveals Their Playbook of Codes, Signals

Yomiuri Shimbun18-05-2025

Shunpei Takeuchi / The Yomiuri Shimbun
A statue in Hanoi, used as a place to rendezvous by North Korean spies, is seen on in January
SEOUL — Last November, South Korea's Suwon District Court sentenced three men to between five and 15 years in prison for spying in South Korea under the instructions of the North Korean intelligence agency. They were members of a spy network formed secretly in South Korea.
The Yomiuri Shimbun obtained details of the investigation and viewed the directives that were admitted as evidence in the ruling. Revealed were glimpses of the information warfare raging between the two countries.
In August 2019, a man was standing at a 'meeting place' in Hanoi, carefully observing his surroundings. A month before, North Korea had sent a directive to the spy network inside its southern neighbor, instructing the man in how to confirm the identity of Pyongyang's agent using signs.
'Branch manager: Open a plastic water bottle and take a sip at 10 o'clock,' read the directive.
'Headquarters member: Once you have seen this gesture, wipe your sunglasses with a handkerchief several times at a spot seven to eight meters away from [the manager].'
'Headquarters' refers to the Cultural Exchange Bureau, or North Korea's intelligence agency, and 'branch manager' refers to the man who was waiting to meet someone in Hanoi. This man headed the spy ring in South Korea, and he was sentenced to 15 years in prison in November.
The ringleader was set to meet an agent next to a statue by Hoan Kiem Lake, a popular tourist spot at the heart of the Vietnamese capital. Should they fail to link up there, a large supermarket nearby was designated as a backup location to meet an hour later.
'Check carefully,' the directive warned the spy leader, 'to see if you are being followed, during the entire time from when you are leaving the country [South Korea] until the meeting [after the rendezvous].'
If he did notice someone was tailing him, the man was to use the codeword 'headache' to inform the intelligence agency via smartphone.
'If the headquarters member lights a cigarette while showing you the way, that's a signal that you are being followed. Move away from the member, find the pursuer and throw him off the track,' the directive said.
However, investigators at the South Korean National Intelligence Service (NIS) were keeping tabs on the spy leader after he arrived in Vietnam and the North Korean agent, starting two days before the pair's rendezvous. The investigators photographed the two walking around near the statue and keeping a lookout. They also took photos of another network member meeting with a North Korean agent the following day.
According to the ruling, members of the South Korean spy network and North Korean agents also met in Phnom Penh in September 2017 and in Guangzhou, China's Guangdong Province, in September 2018. A photo presented at court showed the ringleader getting into a tuk-tuk with a North Korean agent in Phnom Penh.
The man in his 50s who led the spy network was a senior member of the Korean Confederation of Trade Unions, one of South Korea's largest labor unions, and was able to supervise the union's affiliated organizations. He was also charged with violating the National Security Law for collecting information on U.S. military bases.
At the trial, a former North Korean spy who had been caught on duty in South Korea testified about Pyongyang's agent photographed in Cambodia. 'We were in the same group. I lived with this man for 24 hours a day,' the ex-spy said. 'He is an agent who received the title of Hero of the Republic. He has lost a lot of hair and put on a bit of weight [in this picture].'
The ruling allowed such testimony and photographs as evidence, and said the covert meetings overseas were conducted in order 'to receive specific instructions from North Korea and discuss ways to carry out their aim.'
The trial revealed 102 messages between the North and the spy network, with 89 from Pyongyang and 13 from the network. These included instructions to incite anti-Japanese acts over Japan's decision in April 2021 to release treated water from the Fukushima No. 1 nuclear power plant.
Signals in YouTube comments
Kazuki Koike / The Yomiuri Shimbun
People gather in front of the Suwon District Court in South Korea on Nov. 6 ahead of a ruling on three men who were subsequently given prison time for espionage.
The North Korean spy agency sent its instructions to the South Korean network online using steganography, a method of encryption in which data is hidden inside images or messages. Besides emails, they also made use of the comments section on YouTube.
'If you post a pseudonym or text that includes 'Tommy Hall' in the YouTube comments, we will understand that you can go on a trip and will prepare for it.'
This instruction from North Korea in August 2022 was asking a spy in South Korea if it was possible for him to take a trip, in other words to make contact, and it came with a YouTube link attached. The spy was to use the codeword 'Tommy Hall' in the comments if it was possible, or 'uphill road' if it was not.
It's believed YouTube was used as a way to quickly respond to questions from North Korea.
'North Korea makes use of everything, including social media and cutting-edge technology,' said a former North Korean agent.
After conservative Yoon Suk Yeol, who took a tough stance on Pyongyang, was elected president of South Korea in March 2022, the North Korean agency called for increased vigilance.
A directive issued immediately after the election ordered: 'The public security authorities are likely to become more active. Don't leave any physical evidence. USBs should be physically destroyed and burned.'
The evidence from the ruling showed that South Korea's NIS had been aware of the spies' activities since at least September 2017, and it likely surveilled their movements for over five years, up to January 2023.
The last directive from North Korea that was used as evidence was dated December 2022, a month before authorities raided the South Korean network for engaging in espionage.
The message showed concern about a delay in reports from South Korea: 'It's been over two months since we heard from you. We are worried and frustrated, and we miss you.
'You could have sent a short text saying you're fine and describing the situation you're in now. I haven't forgotten the days we spent talking, grasping each other's hands firmly and embracing each other warmly, sharing the love of family.'
At this point, South Korea's investigative authorities seemed to have already tightened the noose around the spy network.

Orange background

Try Our AI Features

Explore what Daily8 AI can do for you:

Comments

No comments yet...

Related Articles

South Korea halts propaganda broadcasts along border with rival North in a move to ease tensions
South Korea halts propaganda broadcasts along border with rival North in a move to ease tensions

Japan Today

time3 hours ago

  • Japan Today

South Korea halts propaganda broadcasts along border with rival North in a move to ease tensions

FILE - A South Korean military vehicle with loudspeakers is seen in front of the barbed-wire fence in Paju, near the border with North Korea, on Feb. 15, 2018.(AP Photo/Ahn Young-joon, File) By KIM TONG-HYUNG South Korea's military shut down loudspeakers broadcasting anti-North Korea propaganda along the inter-Korean border on Wednesday, marking the new liberal government's first concrete step toward easing tensions between the war-divided rivals. The South resumed the daily loudspeaker broadcasts in June last year following a yearslong pause in retaliation for North Korea flying trash-laden balloons toward the South in a psychological warfare campaign. South Korea's Defense Ministry said the move, ordered by President Lee Jae-myung, was part of efforts 'to restore trust in inter-Korean relations and promote peace on the Korean Peninsula.' Kang Yu-jung, Lee's spokesperson, described the decision as a 'proactive step' to reduce military tensions and ease the burden for South Koreans residing in border areas, who have also been affected by North Korea's retaliatory loudspeaker broadcasts. North Korea, which is extremely sensitive to any outside criticism of its authoritarian leadership and its third-generation ruler, Kim Jong Un, didn't immediately comment on the step by Seoul. South Korea reactivated its front-line loudspeakers to blast propaganda messages and K-pop songs toward the North last year in response to thousands of trash balloons that Pyongyang flew toward South Korea to drop substances including wastepaper, cloth scraps, cigarette butts and even manure. From May to November last year, North Korea flew about 7,000 balloons toward South Korea in 32 separate occasions, according to the South's military. The North said that its balloon campaign came after South Korean activists sent over balloons filled with anti-North Korean leaflets, as well as USB sticks filled with popular South Korean songs and dramas. Trash carried by at least one North Korean balloon fell on the South Korean presidential compound in July, raising concerns about the vulnerability of key South Korean facilities. Officials said that the balloon contained no dangerous material and no one was hurt. The South's broadcast playlist was clearly designed to strike a nerve in Pyongyang, where Kim's government has been intensifying a campaign to eliminate the influence of South Korean pop culture and language among the population in a bid to strengthen his family's dynastic rule. The Cold War-style psychological warfare campaigns added to tensions fueled by North Korea's growing nuclear ambitions and South Korean efforts to expand joint military exercises with the United States and strengthen three-way security cooperation with Japan. Lee, an outspoken liberal who took office last week after winning an early election to replace ousted conservative Yoon Suk Yeol, has vowed to improve relations with Pyongyang, which reacted furiously to Yoon's hard-line policies and shunned dialogue. During his election campaign, Lee promised to halt the loudspeaker broadcasts, arguing that they created unnecessary tensions and discomfort for South Korean residents in border towns. In recent months, those residents had complained about North Korea's retaliatory broadcasts, which included howling animals, pounding gongs and other irritating sounds. In a briefing on Monday, South Korea's Unification Ministry, which handles inter-Korean affairs, also called for South Korean civilian activists to stop flying anti-North Korean propaganda leaflets across the border. Such activities 'could heighten tensions on the Korean Peninsula and threaten the lives and safety of residents in border areas,' said Koo Byoungsam, the ministry's spokesperson. In his inaugural address last week, Lee vowed to reopen communication channels with North Korea. But prospects for an early resumption of dialogue between the rival Koreas remain dim. North Korea has consistently rejected offers from South Korea and the United States since 2019, when nuclear talks between Washington and Pyongyang collapsed over sanctions-related disagreements. North Korea's priority in foreign policy is now firmly with Russia, which has received thousands of North Korean troops and large amounts of military equipment in recent months for its war with Ukraine. South Korean and U.S. officials have expressed concern that Kim in return could seek Russian technology transfers that could enhance the threat posed by his nuclear weapons and missile program. Yoon, who was removed from office in April over his short-lived imposition of martial law in December, had focused on strengthening military partnerships with Washington and Tokyo and on securing stronger U.S. assurances of a swift and decisive nuclear response to defend the South against a North Korean nuclear attack. In a fierce reaction to Yoon's policies, Kim declared in January 2024 that he was abandoning the long-standing goals of a peaceful unification with the South and instructed the rewriting of the North's constitution to cement the South as a permanent 'principal enemy.' Following years of heightened testing activity, Kim has acquired a broad range of missiles that could potentially target rivals in Asia and the U.S. mainland. He has also called for increased production of nuclear materials to create more bombs. Rafael Mariano Grossi, director of the International Atomic Energy Agency, said Monday that the U.N. nuclear watchdog is monitoring signs that North Korea may be building a new uranium-enrichment plant at its main nuclear complex in Yongbyon. © Copyright 2025 The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed without permission.

North Korea refused to accept Trump's letter to Kim: report
North Korea refused to accept Trump's letter to Kim: report

Kyodo News

time4 hours ago

  • Kyodo News

North Korea refused to accept Trump's letter to Kim: report

KYODO NEWS - 8 hours ago - 21:26 | All, World North Korea has refused to accept U.S. President Donald Trump's letter to leader Kim Jong Un, a report said Wednesday, citing an informed high-level source. NK News, a website that provides news and analysis on North Korea, quoted the source as saying that Trump drafted the letter to Kim with the aim of resuming bilateral talks, which have been suspended for more than five years. The United States attempted to deliver the letter multiple times through North Korean diplomats stationed at the U.N. headquarters in New York, but they "bluntly" refused, the source was also quoted as saying. The timing remains unclear. The United States and North Korea remain technically in a state of war, as the 1950-1953 Korean War ended in an armistice, not a peace treaty. They have no official diplomatic relations. At their first-ever U.S.-North Korea summit in June 2018 in Singapore, Trump and Kim agreed that Washington would provide security guarantees to Pyongyang in exchange for the "complete" denuclearization of the Korean Peninsula. Later, they fell short of bridging the gap between demands by the United States and North Korea's calls for sanctions relief at their second summit in Hanoi in February 2019. After Trump and Kim surprisingly met in June that year at the Demilitarized Zone dividing the two Koreas, the United States and North Korea held a working-level meeting in Stockholm in October 2019, but that ended without progress. Related coverage: Trump says U.S. communicating with North Korea North Korea raps U.S., Japan, South Korea for inflaming regional tensions

North Korea refused to accept Trump's letter to Kim: report
North Korea refused to accept Trump's letter to Kim: report

Kyodo News

time12 hours ago

  • Kyodo News

North Korea refused to accept Trump's letter to Kim: report

KYODO NEWS - 17 minutes ago - 21:26 | All, World North Korea has refused to accept U.S. President Donald Trump's letter to leader Kim Jong Un, a report said Wednesday, citing an informed high-level source. NK News, a website that provides news and analysis on North Korea, quoted the source as saying that Trump drafted the letter to Kim with the aim of resuming bilateral talks, which have been suspended for more than five years. The United States attempted to deliver the letter multiple times through North Korean diplomats stationed at the U.N. headquarters in New York, but they "bluntly" refused, the source was also quoted as saying. The timing remains unclear. The United States and North Korea remain technically in a state of war, as the 1950-1953 Korean War ended in an armistice, not a peace treaty. They have no official diplomatic relations. At their first-ever U.S.-North Korea summit in June 2018 in Singapore, Trump and Kim agreed that Washington would provide security guarantees to Pyongyang in exchange for the "complete" denuclearization of the Korean Peninsula. Later, they fell short of bridging the gap between demands by the United States and North Korea's calls for sanctions relief at their second summit in Hanoi in February 2019. After Trump and Kim surprisingly met in June that year at the Demilitarized Zone dividing the two Koreas, the United States and North Korea held a working-level meeting in Stockholm in October 2019, but that ended without progress. Related coverage: Trump says U.S. communicating with North Korea North Korea raps U.S., Japan, South Korea for inflaming regional tensions

DOWNLOAD THE APP

Get Started Now: Download the App

Ready to dive into the world of global news and events? Download our app today from your preferred app store and start exploring.
app-storeplay-store