North Korea is increasingly recruiting IT workers from third countries—including Iran and Lebanon—to help infiltrate U.S. companies and funnel salaries back to state agencies funding weapons programs, NBC News reported Friday.
U.S. Alert Details North Korean IT Worker Scheme
A joint advisory issued in July by the U.S. government and several foreign agencies warned that North Korean IT workers “seek out contracts with the intent of remitting their salaries to their parent North Korean agencies. They also pose an insider threat to companies and are involved in data exfiltration, cryptocurrency theft, and theft of sensitive information.”
Tactics Shift to Third-Country Intermediaries
As the United States and partner governments have tightened screening to counter North Korea’s remote-work infiltration, the DPRK has adapted by using foreign nationals to pass initial job interviews. According to the NBC report, once contracts are secured, North Korean operatives typically take over the positions.
Foreign IT workers have been recruited on LinkedIn, with some offered $500 per month in cryptocurrency to work part-time as “interview associates,” the report said.
Cyber Operations Yield Billions in Crypto Theft
The regime’s evolving tactics appear to be paying off. Cointelegraph reported in May, citing cybersecurity firm CrowdStrike, that North Korean state-affiliated hackers and threat actors were responsible for more than $2 billion in cryptocurrency losses in 2025—a 51% year-over-year increase.
Economy Grows Despite Sanctions
The Bank of Korea estimates North Korea’s gross domestic product grew 3.5% in 2025, even as international sanctions remain in place.
Leave a Reply