The North Korean embassy has been in the news lately, so it felt like a good time to finally write this up.

A couple of weeks ago I was in London and stopped by my favorite embassy. I usually stop by whenever I’m in town but this time was a little different, I packed my Flipper Zero with the Wifi board for sniffing wireless traffic in the neighborhood.

The funny thing about doing this is there’s a lovely coffee shop at the Acton Town tube station, and on a nice Sunday no one really stops to ask what you’re doing if you’re just standing outside the North Korean embassy drinking coffee. In fact, several people were surprisingly friendly when I asked if they lived int he area and whether they had ever seen anyone coming or going from the embassy.

This visit was a little more unique as I finally got to see the North Korean flag flying above the building.

From the outside there really isn’t much to see. There’s the Emblem of North Korea over the door, as well as an intercom at the front entrance. The two Mercedes parked out front always seem to be there every time I’ve stopped by. Looking back through photos I’ve taken over the years, it appears to be the same cars in the same spots every time. The people that I spoke with hadn’t seen them coming or going either, although they admitted they didn’t actually live nearby and were just visiting the local park.

On the roof there are a couple of dishes as well as a Yagi antenna. The Yagi antenna is most likely used for UHF television reception as it’s pointing in the direction of hte Crystal Place transmitter for Freeview. There are also a couple of smaller dishes that could be used for Sky TV, which becomes relevant later.

Over the years, whenever I’ve been in London, I’ve fired up WiGLE on my phone while walking by to collect WiFi and Bluetooth data. This time though I had the Flipper Zero and WiFi board for some passive signal collection. Surprisingly you can get pretty close to the embassy on the side street.

Somewhere on the embassy grounds is a Pod Point EV charger. Pod Point units are common across the UK in homes and parking areas. Initially, I assumed this was simply a charger located on the street, but the list of WiFi probes associated with the device revealed something much more interesting. One of the networks it was probing for was TALKTALK5862D1 which matches a WiGLE entry recorded at this address in September 2023.

It’s not clear which vehicles if any use the EV charger currently. It doesn’t appear to be on the front of the house. Satellite imagery on Google Maps shows vehicles in the rear of the property at one point, though these are not currently visible from the street.

The wireless data suggests that the embassy over time and most likely operates with a dual-ISP setup. The strongest and most persistent signal was a British Telecom Home Hub broadcasting BT-7TFNR2. This network appeared consistently throughout the capture, and a computer with an Intel WiFi card was actively observed probing for it by name.

The second connection appears to be a Virgin Media gateway that is broadcasting VM5426158, along with an extender node VM5426158_2GEXT. The _2GEXT suffix suggests this is an extender rather than the primary gateway, implying the main cable modem is elsewhere in the building.

A second computer also using an Intel WiFi chipset was probing for this current Virgin Media network, along with VM9939537 which was another Virgin Media SSID that WiGLE associated with the embassy in a September 2023 capture.

The September 2023 WiGLE data shows VM9939537 running simultaneously with TalkTalk at the same address. The 2026 capture shows BT and Virgin Media running simultaneously

Beyond the networking infrastructure, the capture turned up a fairly ordinary collection of devices associated with the building:

• A Sony BRAVIA KDL-55W809C, a 55-inch 4K television from 2014 that broadcasts a WiFi Direct network called DIRECT-4K-KDL-55W809C
• Two HP printers. A DeskJet 4900 series on channel 6 at -76 dBm, and an M110 LaserJet on the same channel at -84 dBm.
• A TP-Link router broadcasting TP-Link_D284 on channel 2, with the strongest signal in the dataset at -65 dBm.
• A Sonos speaker
• Bluetooth sniffing turned up a P046 SkyQ LC10 device, likely a Sky Q remote or set-top box. This could correlate with one of the rooftop dishes, though confidence here is low given the surrounding residential neighborhood.
• Two client devices also surfaced through probe requests. The first, 68:07:15:7c:12:17, uses an Intel OUI and was probing specifically for BT-7TFNR2 at around -78 dBm, suggesting a device with the embassy’s current BT network saved.
• The second, 34:d2:70:b9:9f:1c, also Intel, was probing for VM9939537 which was the older Virgin Media SSID recorded by WiGLE in 2023. Alongside it were VM928436-5G and TALKTALKB9B7FD, suggesting this device may have been present during earlier network configurations and still retains them in its preferred network list.

What did we learn from all of this?

Nothing extraordinary.

Seems like pretty normal things that you would expect to see in a building. Raw captures are at the end if you want to download or compare notes. As always any more information please send to contact[@]nkinternet[dot]com

Files and report can be downloaded here. All collection was passive and conducted from public space. No attempt was made to connect to, authenticate with, or otherwise interact with any networks or devices.: https://nkinternet.com/wp-content/uploads/2026/06/dprk_wifi.zip