At the Commissioning of the Democratic People’s Republic of Korea Aircraft Carrier Baekdusan

By JD Work

The cheers of the crowd were deafening as the sharp prow of the Baekdusan fast carrier (CVL) slid into the dark waters of the protected basin at Sinpo. The adulation may have even carried some genuine enthusiasm by those caught up in the sight of North Korea’s first aircraft carrier officially launching, mixed in of course with mandatory nationalism under compulsion for fear of “encouragement” by watchful political commissars. The former Mistral-class amphibious assault ship was nearly unrecognizable after more than a decade in the yard, resulting in profound changes to the vessel. These changes go far beyond the superficial difference of the dazzle camouflage paint scheme that replaced the earlier haze gray given to her by the original French builders of Chantiers de l’Atlantique. The oddities of the unusual, algorithmically-derived dark blue pattern were perhaps a fitting metaphor for the long, strange journey that brought this hull to North Korean shores. Bringing a new light carrier into service would be an impressive feat for any naval enterprise, let alone the Korean People’s Navy.

From Egypt to the East Sea of Korea

The complex saga began in the bizarre spring of 2020, as the world reeled under the uncertainties of pandemic. Kim Jong Un had already been in isolation out of fear of the disease, and following a cardiac scare that gained worldwide attention, would emerge even more determined to make his mark upon the global stage through his nation’s military.1 Among these assets would be a stunning set of naval capabilities, built around a ballistic missile submarine (SSB) program and the fleet to protect those boats. During these months, an intrusion attributed to the Reconnaissance General Bureau by commercial cyber intelligence services was attempting to compromise the networks of a cleared defense contractor in the United Kingdom.2 The incident was part of a long-running cyber espionage activity – known commonly as HIDDEN COBRA, Lazarus, or HERMIT – that targeted individuals associated with high-profile defense acquisition efforts to seek out information related to aviation, shipbuilding, missile development, and other critical capabilities.3

Almost overlooked in the flurry of ever-changing malware and forged documents that furthered these machinations, the UK incident was notable only in that the decoy message repurposed a glossy promotional photo from the UK Royal Navy’s Future Aircraft Carrier program. But while this specific lure was detected and the attempt defeated, it was not the last such attempt. Other efforts would persist and ultimately provide sustained access to the shipbuilder, systems integrators, and strike aviation programs. This espionage not only gave the National Defense Commission insight into the capabilities and deployments of newly introduced systems, but the aggregation of stolen documents, technical information, software code, and problem-solving correspondence allowed various Machine Industry Bureaus to circumvent years of research and development activity. Integrating this espionage haul into an ossified and overly centralized military industry was the work of almost a generation of intelligence officers, scientists, and production managers.

For all the edge that stolen intellectual property could offer, the DPRK’s heavy industry could not muster the resources and expertise to construct a major surface combatant out of nothing. To overcome this deficiency, the Korean Worker’s Party turned to the shadowy entity known informally as Office 39. This group essentially served as the organized crime racketeering function of the North Korean state, tasked with generating the illicit revenue required to keep the country functioning and the Kim family in power under the crushing weight of international sanctions. Its far-flung operations ranged from gold smuggling, drug trafficking, cybercrime and other pursuits on a massive scale.4 It would be Office 39’s access to the proceeds of these continuing criminal enterprises that would fund the operation, laundered through the vast markets of the online videogaming industry and the many quasi-legal virtual gambling ventures launched by the casinos of Macau, Manila, and Hanoi – each desperate for gamblers to replace those driven away by pandemic and the downturn of the mainland Chinese economy.

Office 39 would score its grandest coup to date as the Egyptian state collapsed into yet another endless series of coups that continued to ripple out from the Arab Spring. The regime had long established itself through corrupt relationships with key power figures that increasingly were backed by intelligence advantages offered by compromised Orascom telecommunications networks. The HIDDEN COBRA intrusion set subgroup known commonly as APT37, REAPER, Scarcruft, or RICOCHET CHOLLIMA had enabled an initial foothold in the country’s networks after the collapse of a joint venture between the Egyptian firm and the North Korean Ministry of Post and Telecommunications.5 APT37 / REAPER operators built upon this initial access to develop an unprecedented signals intelligence interception architecture across the backbone of telecom infrastructure in the region. Years later, in the frantic uncertainty before Cairo’s ultimate fall, this combination of insider knowledge and powerful friends would give Office 39 the chance to purchase what was then the nearly unserviceable Mistral-class multipurpose amphibious assault ship, ENS Anwar El Sadat. The LHD was the last surviving vessel of two purchased from France after a Gallic deal with the Russian Navy had fallen through in the wake of the invasion of Ukraine and annexation of Crimea.6 The Sadat’s sister ship, the Nasser, had been sunk at her higher-profile port in Alexandria by Ikwan saboteurs, and the Sadat was left to rust.

The ripple effects of serial pandemics throughout the 20s would again prove key. The near total collapse of the recreational and luxury cruise industry left hundreds of vessels at sea in makeshift flotillas, crewed by unpaid and increasingly desperate mariners abandoned by corporate headquarters which had rapidly ceased to exist.7 These ungainly, massive ships were unsuitable for merchant commerce, and poor choices as pirate motherships – although many crews tried both just to survive. Eventually, they would be destined for the shipbreakers in order to extract any value that could be salvaged. The ordinary yards of Alang and Chittagong, already under immense pressures over environmental regulation and worker safety, could not accept hulls encumbered by high profile, already years-long bankruptcy litigation – and especially would be unable to pay a master and crew whose only tenuous claim to ownership was mere possession.8

But the great decoupling had also killed many other vessels no longer needed for trade with an increasingly broken Chinese market, and like countless oil tankers and container ships, these hulls would be stripped in the newly emerging breaker yards of Africa. Here, the remnants of Belt and Road Initiative mercantilist outposts still raced to extract any resources that could be used to offset crippling debts to Beijing, heedless of legality or consequence.9 One more sale to one more shell company, paid through a Southeast Asian nation banking institution cutout, passed without notice. The Sadat would sit at anchor for nearly two years at harbor in Nacala, Mozambique; just another hulk among the many waiting to be beached and broken in a forgotten port at the wrong end of a frequently failing rail corridor.

Only commercial imagery satellites recorded when the Sadat vanished from port under cover of darkness, and even despite the high revisit rate of increasingly more capable constellations, some uncertainty would persist over exactly which night it happened. Active interest had long since faded and monitoring was reassigned to mere automated change detection algorithms, which dutifully flagged the discrepancy as being lost in the sea of other low-profile vessel movements. The system, triaged only by a bored Office of Naval Intelligence analyst, who did not speak French, apparently did not pick up on the significance of the type designator BPC (for Bâtiment de Projection et de Commandement) as he might have then tagged the vessel as an LHD. Instead, it was mistaken for one of many legacy British Petroleum entries that had never been corrected following Brexit. The error would prove costly, especially as the KPN prize crew now sailing the Sadat would embark on a route that would take her through the most desolate and empty waters imaginable.

The over 9,000 nautical mile journey would depend heavily upon Office 39’s prior experience conducting illicit transfers at sea, especially for the clandestine movement of oil to keep the Sadat’s bunkers topped up.10 Over nearly three months at sea, a quarter of the crew would perish from accident, malnutrition exacerbated illnesses, and what became an infamous purge responding to what the KPN would describe as a mutinous plot by so-called “wreckers.” The global community further failed to respond effectively when the Sadat was at last spotted approaching Indonesian waters, initially unclear on her destination. The distractions of the Taiwan crisis further delayed consensus for action as she transited east of Hokkaido. A promised interdiction operation by Russian forces from Vladivostok did not materialize when the lead Lider-2 (Project 23780M) class destroyer allegedly suffered an unspecified mechanical failure, reportedly preventing pursuit – an event which remains viewed with much skepticism by international diplomats and navalists alike.11


The ship once called Sadat was transformed in years-long process in the yard at Sinpo. Her flight deck was extended, and featured a new ski-jump ramp that offered a Short Takeoff But Arrested Recovery (STOBAR) capability for somewhat limited aircraft weights.12 Her obsolete and degraded onboard networks were refitted with an indigenously developed Red Star operating system.13 Somewhat surprisingly new, Iranian-origin 15 Khordad radars and missile canisters would be integrated for air defense, along with multiple CHT-02D torpedo mounts and small arms weapons stations.14 Concept graphics reported by Chinese defense analyst sources also depicted KN-23 SRBM TELs positioned on the aft deck, possibly intended to mimic the U.S. Marine Corps deployment of HIMARS systems on light amphibious warships, although the North Korean missiles have not been observed to date in handheld imagery of the platform.15

On the day of the Baekdusan’s launch, the pierside static display of light aircraft that would operate from her decks also commanded attention, with the ranks of their future pilots assembled alongside in full Nomex suits and oddly shaped augmented reality flight helmets. The two delta wing fighters, a supposedly navalized variant of the country’s indigenously developed “next generation pursuit assault plane,” had been observed through overhead commercial imagery for years. It was still unclear if the North Korean aircraft industry had produced more than a dozen airframes – nearly half of which had already been lost to mishaps during development.

One of these mishaps had claimed the third aircraft previously intended for display, where the platform was lost during the long road movement from the airstrip at Iwon down to the port in the weeks before the ceremony. Handheld imagery of the mishap had circulated among the country’s elites-only StarMesh social media network, where in virtue signaling posts they condemned the heavy transport truck driver for careless driving. It had just as quickly been censored – but not before being picked up and reported to the world by a sharp-eyed Chinese defense blogger.

The obvious gap in the display arrangement had been hastily filled with a Kimchaek unmanned combat aerial vehicle (UCAV). While manned flight operations were still considered the prestige assignment, it was the dark composite of the cranked kite design that brought the Baekdusan its truly operational airwing. A nearly direct two-thirds scale copy of the CASIC CaiHong-7, the stealth platform had been a revolutionary development for DPRK strike capabilities despite its quintessentially 2020s vintage design.16 When fitted with beyond visual range air-to-air missiles, the UCAV could also serve in the combat air patrol (CAP) role, as a pair of Republic of Korea (ROK) KF-X fighters found to their surprise when ambushed near the Northern Limit Line a few years ago. Named for the former Korean People’s Army Air and Anti-Air Force Academy, the Kimchaek UCAV’s resemblance to the Northrup Grumman X-47B demonstrator was a constant reminder of the path not taken by the U.S. Navy. The Kimchaek fighters were also fitted for delivery of autonomous standoff naval mines, using a bolt-on kit of Chinese origin for glide, underwater propulsion, fusing and guidance that could be fitted to low-cost conventional gravity bombs that themselves were well within North Korean production capacities. This too incorporated stolen designs that could be originally traced to cyber espionage against the defense industrial base conducted by Chinese Ministry of State Security operations known as APT40, Periscope, KRYPTONITE PANDA, or GADOLINIUM.17

Implications and Outlook

Baekdusan is in many ways a counter-intuitive platform to Western eyes. The KPN still does not appear to have a genuine strategic requirement for the kind of force projection options that are the traditional role of a carrier or expeditionary strike group. However, to a dictator the investment could be justified solely on its basis as a prestige capability – to say nothing of the propaganda value in continued demonstration to domestic audiences of the Juche ideology of self-reliance. It mirrored the accomplishments of their larger neighbor in acquiring and fielding a modified CV, much as the Chinese People’s Liberation Army Navy managed to convert their purchase of the Varyag heavy aviation cruiser (TAKR) into the fleet’s first carrier, Liaoning.18 But this is likely not the whole story, suggesting both wider ambitions and a new strategic depth to the regime’s ultimate priority: the survival and continued rule of the Kim dynasty.

The Gorae SSB and its successors remain a key linchpin of this priority. These submarines continue to represent a significant wildcard in any potential strategic exchange – despite the relative obsolescence of their design, terrible acoustic profile, and frequent maintenance casualties.19 Even as advances in Western intelligence capabilities, prompt conventional strike options, and other left-of-launch methods increasingly threaten the DPRK mobile missile force, the ability of the Korean People’s Navy to sustain a sea-based second strike delivery platform presents an unknowable challenge to deterrence. This challenge becomes especially salient in the case of an ROK attempt at leadership decapitation, whether due to Pyongyang’s feared bolt out of the blue or Seoul’s anticipated crisis escalation scenarios.

The Baekdusan fast carrier (CVL), or drone carrier (CVLQ) as some would prefer to argue, may instead represent a substantial further investment to protect the Gorae SSB as a second strike retaliation capability, drawing upon older Soviet naval doctrine developed when facing similar correlations of forces and qualitative disadvantages. The bastion model of patrol within confined seas, where access may be controlled via strategic chokepoints or sea denial, may have unexpectedly re-emerged in part as a function of the new time and distance equations that bound the contemporary weapons engagement zone. In this, the DPRK may also be mimicking emerging thinking observed over recurring deployments of the PLAN SSBN force.20 A North Korean carrier provides the option, at least as a matter of doctrine, to delay regional or international naval intervention in order to buy necessary operating space for the survival of the Gorae and her sister boats.

It still remains to be seen if this costly and audacious program will be nothing more than a white elephant. Certainly, the debate is far from finished regarding the limited survivability of a large surface platform like a carrier in the face of contemporary precision guided munitions fires, especially given ever-increasing ranges, loiter times, sensor integration, and autonomy. The remarkable accomplishment of the Baekdusan may be merely reduced to the first flaming datum in a future peninsular conflict.

Still, one cannot help but reflect on what might have been different. The combination of factors that had to line up “just-so” for this carrier to be built was the result of remarkable North Korean tenacity, and no small degree of luck. So many opportunities existed where intervention could have halted Pyongyang’s progress, starting from the earliest cyber espionage campaigns against defense industrial base contractors. But very much like the reaction to early Chinese forays toward a blue water navy in the 1990s, serious people would not take the idea seriously. After all, everyone knew the immense hurdles of building a naval aviation warfare community to operate from a narrow deck at sea. This simply could not be achieved using a rusting hulk headed to the shipbreakers, by the kinds of people more at home in a casino than in a banker’s office or a uniform. Likewise, conventional wisdom demands that serious naval strategists focus on power projection in the open ocean, unencumbered by the distractions of littoral operations in close and confined seas.

But what if they were wrong?

JD Work serves as the Bren Chair for Cyber Conflict and Security at Marine Corps University, and as a non-resident senior fellow with the Atlantic Council’s Cyber Statecraft Initiative. He holds additional affiliations with the School of International and Public Affairs at Columbia University, the Elliot School of International Affairs at George Washington University, and as a senior adviser to the Cyberspace Solarium Commission. He can be found on Twitter @HostileSpectrum. The views and opinions expressed here are those of the author(s) and do not necessarily reflect the official policy or position of any agency of the U.S. government or other organization.


1. Economist Intelligence Unit, “North Korea politics: Reports of leader’s illness stoke regime stability concerns,” April 22, 2020.; IHS Global Insight. “Government stability and policy direction continuity likely despite North Korean leader’s probable ill health”. 23 April 2020.; JD Work. “Loose cobras: DPRK regime succession and uncertain control over offensive cyber capabilities”. Atlantic Council. 30 April 2020.

2. Strange Real Intel. “Operation Flash Cobra”. 5 May 2020.

3. Departments of State, the Treasury, and Homeland Security, and Federal Bureau of Investigation. “Guidance on the North Korean Cyber Threat,” 15 April 2020,

4. Soo Kim. “Luxury Goods in North Korea: Tangible and Symbolic Importance to the Kim Jong-un Regime.” On Korea Academic Paper Series. Korea Economic Institute of America. 2014.; FireEye. “North Korea, Iran, and Other Isolated Regimes May Increasingly Use Cyber Crime Capabilities”. 18 May 2017.; CrowdStrike. “Baselining North Korean Cyber Capabilities”. 3 August 2017.; FireEye. “Threats to Cryptocurrencies”. 10 August 2017.; CrowdStrike. “Office 39: North Korea’s Money Maker”. 5 December 2017.; CrowdStrike. “Organizational Overview of Bureau 121: The Suspected DPRK Cryptocurrency Miner”. 26 February 2018.; FireEye. “Country Profile: North Korea.” 8 March 2018.

5. FireEye. “APT37 (Reaper): North Korean Cyber Espionage Group Expands Its Focus and Capabilities”. 19 February 2018.; CrowdStrike. “RICOCHET CHOLLIMA: Campaigns Spanning 2016 to 2018”. 4 April 2018

6. Frederic Lert, Nikolai Novichkov, Jeremey Binnie. “Egypt to buy the two ex-Russian Mistral”. Jane’s Defence Weekly. 24 September 2015.; Jane’s Intelligence Weekly. “French refusal to deliver Mistral warships to Russia raises contract enforcement and sanction risks” 26 November 2014.; Lee Willett, Nicholas de Larrinaga, Guy Anderson. “France halts first Russian Mistral delivery in response to Ukraine crisis”. Jane’s Navy International. 4 September 2014.

7. Tyler Rogoway. “Satellite Images Show Armadas Of Vacant Cruise Ships Huddling Together Out At Sea”. The War Zone. 7 May 2020.

8. Economist. “The world’s biggest ship-breaking town is under pressure to clean up”. 7 March 2019.; Peter Gwin. “The Ship-Breakers”. National Geographic. May 2014.

9. Kenneth Rapoza. “Overwhelming Majority Say Time To ‘Decouple’ From China”. Forbes. 27 April 2020. ; James Politi. “Fears rise that US-China economic ‘decoupling’ is irreversible”. Financial Times. 21 January 2020. ; John Hurley, Scott Morris, Gailyn Portelance. “Examining the debt implications of the Belt and Road Initiative from a policy perspective”. Journal of Infrastructure, Policy and Development. Vol 3 No 1. 2019.

10. Benjamin Katzeff Silberstein. “China’s Sanctions Enforcement and Fuel Prices in North Korea: What the Data Tells Us.” 38 North. 1 February 2019. ; Inderpreet Walia. “UN blacklists vessels and shipping companies over North Korea smuggling. Lloyds List Maritime Intelligence. 2 April 2018. ; Bruce E. Bechtol, Jr. “North Korean Illicit Activities and Sanctions: A National Security Dilemma.” Cornell International Law Journal. 51 CORNELL INT’L L.J. 57 (2018).

11. Geoffry Till. “Future conditional: naval power sits at centre of Russian strategy.” Jane’s Navy International. 20 July 2016.; Nikolai Novichkov. “Russian destroyer design revealed.” Jane’s Navy International. 14 May 2015.

12. Richard Scott. “From the flight deck: Innovation in carrier take-off and landing.” Jane’s Navy International. 22 March 2018.

13. Florian Grunow, Niklaus Schiess. “Lifting the Fog on Red Star OS”. 32C3. Hamburg. 27 December 2015.

14. Jeremy Binnie. “Iran unveils new SAM system. Jane’s Defence Weekly. 12 June 2019.; Jeremy Binnie. “On the radar: Iranian air defence developments”. Jane’s Defence Weekly. April 2018.

15. Jeffrey Lewis. “Preliminary Analysis: KN-23 SRBM”. James Martin Center for Nonproliferation Studies, Middlebury Institute of International Studies at Monterey. 5 June 2019. ; Gidget Fuentes. “Marines Fire HIMARS From Ship in Sea Control Experiment With Navy”. USNI News. 24 October 2017.

16. Kelvin Wong. “Over the rainbow: Cai Hong family takes to the world stage”.  Jane’s International Defence Review. 30 January 2018.; International Defense Review. “Unmanned dragons: China’s UAV aims and achievements” 23 January 2012.

17. CrowdStrike. “Global Threat Report.” March 2020. ; FireEye. “Chinese Cyber Threat Activity Targeting Foreign Militaries and National Security Entities”. 15 October 2019. ; Michael Fabey. “USN seeks to tackle mine warfare shortfalls”. Jane’s Navy International. 31 January 2019.; Red Sky Alliance. “Anchor Panda and Periscope – Threat Actors Targeting Maritime Operations”. March 2019.; FireEye. “Attack Lifecycle: APT40 (Periscope)”. 19 December 2018.

18. Reuben F Johnson. “Analysts examine role of China’s future carrier force”. Jane’s Defence Weekly. 4 March 2016.; Reuben F Johnson. “PLAN’s future carriers to be updated copies of Ukrainian design.” Jane’s Defence Weekly. 7 January 2016.; James R. Holmes. “The Long, Strange Trip of China’s First Aircraft Carrier.” 3 February 2015. ; Robert Farley. “What if China Never Acquired the Varyag.” The Diplomat. 23 January 2015. ; Andrew S. Erickson, Abraham M. Denmark, Gabriel Collins. “Beijing’s Starter Carrier and Future Steps: Alternatives and Implications”. Naval War College Review. Vol 65 No 1. 2012. ; Richard Scott. “Chinese aircraft carrier capability unlikely before 2015, says US report”. Jane’s Navy International. 31 March 2009.;

19. Gabriel Dominguez, Kosuke Takahashi. “North Korea test-fires possible SLBM.”. Jane’s Defence Weekly. 2 October 2019. ; Nick Hansen. “Images show North Korea building larger ballistic missile submarine”. Jane’s Intelligence Review. 2 August 2019. ; Gabriel Dominguez. “North Korea releases partial images of ‘newly built submarine’”. Jane’s Defence Weekly. 25 July 2019. ;  ; Jack Liu, Peter Makowsky and Jenny Town. “North Korea’s Sinpo South Shipyard: Submarine Shipbuilding Continuing at Slow Pace”. 38 North. 12 April 2019. ; Joseph S. Bermudez Jr. “North Korea’s Submarine Ballistic Missile Program Moves Ahead: Indications of Shipbuilding and Missile Ejection Testing.”. 38 North. 16 November 2017. ; Joseph S. Bermudez Jr. “Sinpo South Shipyard: Is the GORAE Set to Sail?”. 38 North. 19 December 2016. ; Nick Hansen, Markus Schiller. “North Korea tests submarine-launched missile.” Jane’s Intelligence Review. 9 September 2016. ; North Korea’s Ballistic Missile Submarine: Probable Post-Missile Test Maintenance; Joseph S. Bermudez Jr. “Construction Hall Externally Complete”. 38 North. 20 July 2016. ; Joseph S. Bermudez Jr. “North Korea’s Submarine-Launched Ballistic Missile: Continued Progress at the Sinpo South Shipyard”. 38 North. 3 May 2016.

20. Tong Zhao. Tides of Change: China’s Nuclear Ballistic Missile Submarines and Strategic Stability. Carnegie-Tsinghua Center for Global Policy. October 2018. ; Matthew Harris. “Rig for sea: Countering the deployment of Chinese ballistic missile submarines.” Comparative Strategy. Vol 35 Issue 5. 2016; Wu Riqiang. “Survivability of China’s Sea-Based Nuclear Forces.” Science & Global Security. Vol 19 Issue 2. 2011. ; Kristian Atland. “The Introduction, Adoption and Implementation of Russia’s ‘Northern Strategic Bastion’ Concept, 1992–1999”. Journal of Slavic Military Studies. Vol 20 Issue 4. 2007; Christopher A. Ford, David A. Rosenberg. “The Naval Intelligence Underpinnings of Reagan’s Maritime Strategy”. Vol 28 Issue 2. 2005. ; Jan S Breemer. “The Soviet Navy’s SSBN bastions: Why explanations matter.” RUSI Journal. Vol 134 Issue 4. 1989.; Walter M. Kreitler. The Close Aboard Bastion: a Soviet ballistic missile submarine deployment strategy. Naval Postgraduate School. 1988. ; Jan S Breemer. “The soviet Navy’s SSBN bastions: New questions raised”. RUSI Journal. Vol 132 Issue 2. 1987.; Jan S Breemer. “The soviet navy’s SSBN bastions: Evidence, inference, and alternative scenarios”. Volume 130, Issue 1. 1985.

Featured Image: “Modified Aircraft Carrier” by Jack Cong via ArtStation

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.