Now recruiting: North Korea looks abroad for talent in its scheme to infiltrate U.S. companies

Key Points:

• North Korea has expanded its covert scheme to infiltrate U.S. companies by recruiting remote workers from countries such as Iran, Lebanon, Syria, South Africa, and Saudi Arabia to conduct job interviews and secure positions, which are then taken over by North Korean agents.
• This operation, involving thousands of workers and hundreds of U.S. companies, generates hundreds of millions of dollars annually, which is laundered to fund North Korea’s illicit weapons programs, including nuclear and ballistic missile development.
• U.S. government agencies and cybersecurity firms have identified increasingly sophisticated tactics, such as using foreign nationals to bypass identity verification measures, with recruits often coached to use false identities and paid in cryptocurrency.
• The scheme has grown since the pandemic, with North Korea subcontracting parts of the interview and job process to skilled developers worldwide, including in Nigeria, Pakistan, India, and Latin America, to scale their operations.
• North Korea’s Foreign Ministry has denied the allegations, calling the U.S. and allied governments’ warnings politically motivated attempts to tarnish its image.