North Korean IT Workers Infiltrate U.S. Corporations, Funding Weapons Programs Through Deceptive Schemes
Thousands of North Korean IT workers are infiltrating U.S. corporations by posing as legitimate employees, using stolen American identities, 'laptop farms,' and artificial intelligence to secure remote jobs. These operatives generate significant revenue for North Korea, with nearly $800 million in 2024 alone, which the Treasury Department states directly funds the regime's weapons programs. Once hired, these workers gain trusted access to corporate networks, creating opportunities for data theft, espionage, extortion, and more sophisticated cyber operations. Michael 'Barni' Barnhart, a cybersecurity threat hunter, revealed that North Korean IT workers have applied to, worked for, or targeted 18 out of 20 sampled Fortune 500 companies. The scheme has evolved to include recruiting U.S. citizens as intermediaries to host company laptops and impersonate applicants in interviews, further complicating detection.