North Korean IT Workers Impersonate Remote Employees to Fund Regime
A U.S. indictment reveals a six-year scheme where North Korean operatives used fake identities to infiltrate companies, extort funds, and support weapons programs.
- Fourteen North Korean nationals have been indicted in the U.S. for wire fraud, money laundering, and identity theft linked to their IT worker scheme.
- The operatives used stolen identities, AI-generated credentials, and fake personas to secure remote IT jobs, targeting companies in the U.S., Australia, and beyond.
- Proceeds from the scheme, totaling at least $88 million, were funneled back to North Korea to support its weapons programs and evade international sanctions.
- Some workers extorted employers by stealing and threatening to release sensitive data unless ransoms were paid, often demanding cryptocurrency.
- Authorities warn businesses to enhance hiring scrutiny, including verifying identities through video interviews, to counter this ongoing and evolving threat.
Sky News 
BBC 
The Sydney Morning Herald 
The Register 
UPI 
Newsweek 
CNBC 
BleepingComputer 
Associated Press 
U.S. Department of Justice 