How North Korean IT Workers Infiltrated Western Tech Companies

11 hours ago

North Korea has been placing remote workers in U.S. companies to funnel money back to its regime and steal sensitive information.
These workers' salaries help evade sanctions and fund North Korea's weapons programs, including ballistic missiles.
A cybersecurity firm, Nisos, uncovered a network of at least 20 North Korean operatives who applied to over 160,000 jobs.
The workers used stolen identities, coordinated job applications, and communicated via messaging platforms.
North Korean IT workers often operate from China, using VPNs and laptop farms to appear as U.S.-based employees.
The schemes generate hundreds of millions annually, with proceeds funding North Korea's illicit programs.
U.S. authorities have sanctioned individuals and entities involved, but enforcement remains challenging due to the global nature of the operations.
North Korea's cyberoperations are expanding, targeting cryptocurrency firms and using AI to scale their efforts.
Facilitators in the U.S. and China help launder money and manage laptop farms for these operations.
Experts warn that North Korean workers could leave backdoors in systems, posing long-term security risks.

Hasty Briefsbeta