North Korean IT Workers Exploit Foreign Facilitators to Infiltrate U.S. Companies, Evade Sanctions
North Korean cyber teams are expanding their operations to place fake technology workers in global companies, including those in the U.S., by utilizing foreign developers to obscure the identities of operatives applying for remote jobs. This scheme involves North Korean IT workers securing foreign contracts and funneling their earnings back to Pyongyang, thereby supporting sanctioned programs like weapons development. U.S. government agencies and cybersecurity firms report that the operation has broadened beyond the U.S. to include facilitators in countries such as South Africa, Nigeria, India, and Iran. These foreign recruits are sometimes paid around $500 per month to assist North Korean candidates in bypassing recruitment checks, even acting as 'interview associates' on camera. The United Nations estimates that these remote IT worker schemes generate up to $600 million annually, while U.S. intelligence assessments suggest North Korea earns at least $1 billion annually from cyber activities, including th...
