Reconnaissance General Bureau

From Wikipedia, the free encyclopedia
Jump to navigation Jump to search
Reconnaissance General Bureau of the General Staff Department
Intelligence agency overview
Preceding Intelligence agency
Parent departmentGeneral Staff Department of the Korean People's Army (Partially)
Revised RomanizationJeongchal Chongguk
McCune–ReischauerChŏngch'al Ch'ongguk

The Reconnaissance General Bureau (Korean: 정찰총국; RGB, Reconnaissance Bureau of the General Staff Department[1]) is a North Korean intelligence agency that manages the state's clandestine operations. Most of their operations have a specific focus on Japan, South Korea and United States.[2] It is believed to have been established in 2009 or 2010.[2]

It is believed to be the Direct successor of the General Staff Department of the Korean People's Army's Reconnaissance Bureau (Korean: 정찰국),[3] which was responsible for several North Korean espionage such as 1996 Gangneung submarine infiltration incident,[4] the External Investigations and Intelligence Department (Korean: 조선노동당 대외정보조사부 also known as the Office 35) from the Central Committee of the Workers' Party of Korea, and the Operations Department (which was responsible for kidnapping foreign nationals during the Cold War) from the Central Committee of the Workers' Party of Korea (Korean: 조선노동당 작전부) were moved from WPK jurisdiction to the Reconnaissance General Bureau. [5]

It's known to be headed at one time by Kim Yong-chol as the first head of the RGB.[6][7]


The RGB is regarded as North Korea's primary intelligence and clandestine operations organ.[8] Although its original missions have traditionally focused on clandestine operations such as commando raids, infiltrations and disruptions, the RGB has since come to control most of the known North Korean cyber capabilities, mainly under Bureau 121 or its speculated successor, the Cyber Warfare Guidance Bureau.[8]

The foundations for North Korean cyber operations were built in the 1990s, after North Korean computer scientists returned from travel abroad proposing to use the Internet as a means to spy on enemies and attack militarily superior opponents such as the United States and South Korea.[9] Subsequently, students were sent abroad to China to participate in top computer science programs.[9]

The cyberwarfare unit was elevated to top priority in 2003 following the US invasion of Iraq.[9]

The RGB was established in 2009 to consolidate various intelligence and special operations agencies of the North Korean government, meaning that units previously tasked with "political warfare, foreign intelligence, propaganda, subversion, kidnapping, special operations, and assassinations" were merged into one single organization.[10]

On October 21, 2010, a RGB agent posing as a defector was caught by South Korean police for attempting to assassinate Hwang Jang-yop, who died from natural causes.[11]

On October 31, 2017, two suspects were arrested by Public Security police in Beijing in an attempt to assassinate Kim Han-sol.[12] They were part of a seven-man team sent by the RGB.[13]


The RGB is structured as such in 2017:[1]

Department Mandate
First Department Training and technical assistance
Second Department Military intelligence
Third Department Signals intelligence and computer hacking
Fifth Department Known as Bureau 35, deals with foreign intelligence, including South Korea. Suspected of conducting the assassination plot on Kim Jong-nam
Sixth Department Military contacts/policy guidelines
Seventh Department Logistics

Unit 180 is a cell specializing in cyberwarfare operations.[14] Lab 110 is another cyberwarfare unit.[10]

Reconnaissance missions are also partially overseen by the General Staff Department (GSD) of the Korean People’s Army (KPA). As of 2014, experts argued that "North Korea does not seem to have yet organized these units into an overarching Cyber Command."[10]

The RGB seems to report directly to the National Defense Commission, as well as Kim Jong-un as the supreme commander of the Korean People’s Army.[10]

See also[edit]


  1. ^ a b
  2. ^ a b "Kim Jong-nam: Who in North Korea could organise a VX murder?". BBC News. 24 February 2017. Retrieved 2017-05-13.
  3. ^ "38 North Special Report: A New Emphasis on Operations Against South Korea?" (PDF). 38 North.
  4. ^ "In 1996, a Dead North Korean Spy Submarine (Armed with Commandos) Nearly Started a War". Center for the National Interest.
  5. ^ — (2013). "The Role and Influence of the Party Apparatus". In Park, Kyung-ae; Snyder, Scott (eds.). North Korea in Transition: Politics, Economy, and Society. Rowman & Littlefield. pp. 19–46. ISBN 1442218126.
  6. ^ "North Korea Is Sending Military Hardliner Kim Yong Chol to the Olympic Closing Ceremony. Here's What to Know". Time. Retrieved 3 March 2018.
  7. ^ "N Korea to send general to Olympics". 22 February 2018. Retrieved 3 March 2018 – via
  8. ^ a b "North Korea's Cyber Operations: Strategy and Responses" (PDF). Center for Strategic and International Studies (CSIS).
  9. ^ a b c Sanger, David E.; Kirkpatrick, David D.; Perlroth, Nicole (2017-10-15). "The World Once Laughed at North Korean Cyberpower. No More". The New York Times. ISSN 0362-4331. Retrieved 2017-10-16.
  10. ^ a b c d "The Organization of Cyber Operations in North Korea" (PDF). Center for Strategic and International Studies (CSIS).
  11. ^ "S Korea arrests 'N Korean agent'". Retrieved 7 September 2018.
  12. ^ Ryall, Julian (30 October 2017). "China 'detains North Korean assassins seeking Kim Jong-un's dissident nephew Kim Han-sol'". Retrieved 7 September 2018 – via
  13. ^ "Chinese police foil assassination plot on Jong Nam's son". 31 October 2017. Retrieved 7 September 2018.
  14. ^ Park, Ju-min; Pearson, James. Gopalakrishnan, Raju (ed.). "Exclusive: North Korea's Unit 180, the cyber warfare cell that worries the West". Reuters. Archived from the original on May 21, 2017.