North Korea Employs Foreign Talent to Infiltrate US Companies: Report
According to NBC, North Korea is employing remote workers from third countries such as Iran and Lebanon to facilitate infiltration of US firms and secure funding for its weapons programs. In July, the US government and foreign agencies issued alerts highlighting North Korean IT workers' tactics of obtaining contracts, remitting salaries back to their parent agencies, and acting as insider threats involved in data exfiltration and cryptocurrency theft.
Use of Foreign IT Professionals and Operational Scheme
In response to countermeasures by the US and other governments, North Korea increasingly recruits IT workers from third countries to pass job interviews and secure contracts. Once contracts are obtained, North Korean operatives generally take over the positions. NBC revealed that foreign IT specialists were identified on LinkedIn and some were offered $500 monthly in cryptocurrency to work part-time as "interview associates."
Growing Success and Economic Context
According to cybersecurity firm CrowdStrike, reported by Cointelegraph in May, North Korean state-affiliated hackers caused over $2 billion in cryptocurrency losses in 2025—a 51% increase year-over-year. Meanwhile, the Bank of Korea estimates North Korea’s GDP grew by 3.5% in 2025 despite worldwide sanctions. This suggests North Korea’s tactics in generating revenue through cybercrime are yielding tangible results.
Why it matters
The news highlights North Korea’s evolving tactics to circumvent international sanctions and bolster its cybercriminal activities. By employing foreign talent from third countries, Pyongyang expands its operational capabilities and reduces detection risks. This underscores the increasing complexity of state-sponsored cyber threats and the critical need for international cooperation to counter such actions effectively.
Prepared from the source material with AI-assisted editing and checked against the supplied facts.
Open original source ↗